`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_817":818,"_819":820},"routes/_app.x.$handle.$name",{"_99":98,"_31":43,"_108":87,"_26":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":122,"_123":24,"_124":125,"_126":57,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",17,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","payana_security_mtpelerin_v1.ts","latestPath","fileId","80470e42-ab3f-11f1-8fdc-1607ee4eb77e","name","fileType","script","content","import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\nconst db=getActiveDatabase(); const storage=getStorageState(); const now=new Date().toISOString();\nconst checkpoint=\"sec_mtpelerin_static_v1_20260908\";\nconst constraints={score:88,constraints:[\n \"Immunefi program live; last updated 2026-08-12; smart-contract and web/app Critical USD 5,000, High USD 1,000; KYC not required; PoC always required.\",\n \"No testing on mainnet or public testnet deployed code. Use static analysis/local tests/local forks only; no DoS/significant traffic/social engineering/third-party testing.\",\n \"BridgeToken.sol and listed rule contracts are in scope; best-practice critiques, privileged-only/centralization impacts and bugs without impact PoC are out of scope.\",\n \"ChainSecurity audited 2019 code and documented/fixed transferFrom allowance, realm interference, on-hold replay and other findings. Hacken lists a later ERC20+Bridge audit dated 2021-10-21.\",\n \"EIP-2612/EIP-3009 were added in commit c9ab2878780661b52120d8dfb68e12ee5dbcb36b on 2020-11-13; bulk transfer followed in Nov 2020, so these are post-2019 surfaces but plausibly covered by the 2021 Hacken audit.\",\n \"Current repository master observed at 1126cfca433dcd92882795e8c44d0995776e03f4 (2023-03-09 bumped version); post-2021 deltas need differential review rather than assuming audit coverage.\",\n]};\nawait db.execute({sql:`INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,args:[\"mtpelerin_immunefi\",\"Mt Pelerin / Immunefi\",\"Immunefi\",\"https://immunefi.com/bug-bounty/mtpelerin/\",\"ACTIVE_STATIC_AUDIT_NO_REPORTABLE_FINDING\",\"1000\",\"5000\",\"USD\",\"KYC_NOT_REQUIRED\",\"ZERO_CAPITAL_STATIC_LOCAL_FORK_ONLY\",null,JSON.stringify(constraints),now,\"OFFICIAL_SCOPE_PLUS_SOURCE_AUDIT\",\"Immunefi current program + MtPelerin bridge-v2 + ChainSecurity 2019 + Hacken 2021 listing\",now,now]});\nconst audit={\n version:\"mtpelerin-static-audit-1.0.0\",\n repo:{name:\"MtPelerin/bridge-v2\",head:\"1126cfca433dcd92882795e8c44d0995776e03f4\"},\n hypotheses:[\n {id:\"MT-H1\",title:\"Allowance bypass when before-hook increases transfer amount\",state:\"REJECTED_CURRENT_SOLIDITY_RULESET\",reason:\"BridgeERC20/bulkTransferFrom pre-check requested value and decrement actual updatedAmount. The only current Solidity beforeTransferHook implementation found is SoftTransferLimitRule, which explicitly preserves amount. A malicious administrator installing an arbitrary amount-increasing rule is privileged behavior and out of scope.\"},\n {id:\"MT-H2\",title:\"ERC-2612 zero-owner malformed-signature approval\",state:\"REJECTED\",reason:\"permit lacks an explicit owner!=0 check, but ECRecover.recover itself requires recovered signer != address(0), so malformed ecrecover=0 cannot satisfy the permit equality.\"},\n {id:\"MT-H3\",title:\"EIP-3009 missing receiveWithAuthorization\",state:\"NON_SECURITY_INTEROPERABILITY_UNLESS_CONCRETE_IMPACT\",reason:\"The local IERC3009 exposes transferWithAuthorization but not receiveWithAuthorization. Omission alone is standards/interoperability scope, not an in-scope theft/freezing impact.\"},\n {id:\"MT-H4\",title:\"Post-2019 signed-authorization and bulk-transfer surfaces\",state:\"AUDIT_COVERAGE_NEEDS_DIFF\",reason:\"These features landed in Nov 2020 after ChainSecurity's 2019 audit; Hacken lists an Oct 2021 ERC20+Bridge audit, so duplicate/coverage must be checked before escalating any candidate.\"},\n ],\n next:[\"diff 2021-audit-era code against 2023 head\",\"inspect post-audit event-order and processor/rule deltas\",\"review authorization/bulk-transfer tests for missing adversarial invariants\",\"only build local PoC after a concrete impact hypothesis survives static falsification\"],\n boundaries:[\"NO_MAINNET_TESTING\",\"NO_PUBLIC_TESTNET_TESTING\",\"NO_TRAFFIC_GENERATION\",\"NO_REPORT_SUBMISSION_YET\",\"NO_FINDING_CLAIMED\"]\n};\nawait db.batch([\n {sql:`INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?) ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,args:[\"security_static_audit_mtpelerin_v1\",JSON.stringify(audit),\"SOURCE_AND_AUDIT_DIFF_EVIDENCE\",checkpoint,now,now]},\n {sql:`INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,args:[\"action-mtpelerin-static-v1\",\"mtpelerin_immunefi\",\"STATIC_SECURITY_AUDIT\",\"COMPLETED_NO_FINDING\",\"LOW\",\"USER_CONTINUE_LOOP\",1,\"Static-only review of in-scope BridgeToken/rules against historical audits\",\"Rejected allowance-hook and zero-owner hypotheses; no reportable finding; queued post-2021 differential review\",null,now,now,\"NO_FINDING_SOURCE_GROUNDED\",now,now]}\n]);\nconst r=await db.execute({sql:\"SELECT status,evidence_state FROM payana_opportunities WHERE id=?\",args:[\"mtpelerin_immunefi\"]}); const s=await db.execute({sql:\"SELECT key FROM payana_state WHERE key=?\",args:[\"security_static_audit_mtpelerin_v1\"]});\nconst pass=storage.activeProvider===\"turso\"&&r.rows.length===1&&String((r.rows[0] as any).status)===\"ACTIVE_STATIC_AUDIT_NO_REPORTABLE_FINDING\"&&s.rows.length===1;\nconst out={pass,provider:storage.activeProvider,status:r.rows[0],audit}; console.log(JSON.stringify(out)); if(!pass)throw new Error(\"MTP_STATIC_AUDIT_PERSIST_FAILED\"); export default out;","createdAt",["D",1788842464851],"branchVersion","branchId","16436289-29f9-49bc-8560-703c7a74051e","id","348a33bb-f2d9-4c7a-b6a6-b2762cf9a17f","guh-knowledge-vault",["D",1788716337448],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Private searchable mirror of ChatGPT exports","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a077cd-4980-75c9-8c9f-12270a3b1d2b","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","348a33bbf2d94c7ab6a6b2762cf9a17f","tursoHostname","348a33bbf2d94c7ab6a6b2762cf9a17f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789499469860],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":53,"_104":105,"_106":24},"branch",{"_13":14,"_31":87,"_41":40,"_88":42,"_89":90,"_91":92,"_93":48,"_94":42,"_95":63,"_96":43,"_97":98},"isOwned","payana-eligibility-integrity-v4","projectId","forkedBranchId","bb539edb-15fc-48c6-a690-7d3728033cd0","forkedBranchVersion",37,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":812,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":813,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":814,"_82":815,"_84":816,"_86":24},"tree",[456,467,469,480,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521],"files",[456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521],"counts",{"_445":61,"_446":447,"_448":61,"_449":450,"_451":452},"contents",[138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180],"upstreamProject","upstreamBranch",{"_41":90,"_36":131,"_132":133,"_31":134,"_88":42,"_13":135,"_89":-5,"_91":-5,"_136":137,"_45":-5,"_86":24,"_47":48,"_97":98,"_62":63,"_96":43},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1788716337448],"updatedAt",["D",1789089349222],"main",38,"lockfileKey","1789089349347-esm.town_v_cleitoncosta_guh-knowledge-vault@38-main",{"_41":440,"_31":441,"_29":442,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":443,"_13":61,"_32":428,"_34":-5,"_23":24,"_189":-5,"_26":444},{"_41":435,"_31":436,"_29":437,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":438,"_13":61,"_32":428,"_34":-5,"_23":24,"_189":-5,"_26":439},{"_41":430,"_31":431,"_29":432,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":433,"_13":61,"_32":428,"_34":-5,"_23":24,"_189":-5,"_26":434},{"_41":424,"_31":425,"_29":426,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":427,"_13":61,"_32":428,"_34":-5,"_23":24,"_189":-5,"_26":429},{"_41":418,"_31":419,"_29":420,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":421,"_13":61,"_32":20,"_34":422,"_23":24,"_189":-5,"_26":423},{"_41":412,"_31":413,"_29":414,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":415,"_13":61,"_32":20,"_34":416,"_23":24,"_189":-5,"_26":417},{"_41":405,"_31":406,"_29":407,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":408,"_13":61,"_32":409,"_34":410,"_23":24,"_189":-5,"_26":411},{"_41":399,"_31":400,"_29":401,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":402,"_13":61,"_32":33,"_34":403,"_23":24,"_189":-5,"_26":404},{"_41":393,"_31":394,"_29":395,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":396,"_13":61,"_32":33,"_34":397,"_23":24,"_189":-5,"_26":398},{"_41":387,"_31":388,"_29":389,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":390,"_13":61,"_32":33,"_34":391,"_23":24,"_189":-5,"_26":392},{"_41":381,"_31":382,"_29":383,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":384,"_13":61,"_32":33,"_34":385,"_23":24,"_189":-5,"_26":386},{"_41":375,"_31":376,"_29":377,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":378,"_13":61,"_32":33,"_34":379,"_23":24,"_189":-5,"_26":380},{"_41":369,"_31":370,"_29":371,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":372,"_13":61,"_32":33,"_34":373,"_23":24,"_189":-5,"_26":374},{"_41":363,"_31":364,"_29":365,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":366,"_13":61,"_32":33,"_34":367,"_23":24,"_189":-5,"_26":368},{"_41":357,"_31":358,"_29":359,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":360,"_13":61,"_32":33,"_34":361,"_23":24,"_189":-5,"_26":362},{"_41":351,"_31":352,"_29":353,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":354,"_13":61,"_32":295,"_34":355,"_23":24,"_189":-5,"_26":356},{"_41":345,"_31":346,"_29":347,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":348,"_13":61,"_32":33,"_34":349,"_23":24,"_189":-5,"_26":350},{"_41":337,"_31":338,"_29":339,"_184":-5,"_39":40,"_38":340,"_186":57,"_36":341,"_13":342,"_32":33,"_34":343,"_23":24,"_189":-5,"_26":344},{"_41":330,"_31":331,"_29":332,"_184":-5,"_39":40,"_38":333,"_186":57,"_36":334,"_13":61,"_32":33,"_34":335,"_23":24,"_189":-5,"_26":336},{"_41":324,"_31":325,"_29":326,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":327,"_13":61,"_32":33,"_34":328,"_23":24,"_189":-5,"_26":329},{"_41":318,"_31":319,"_29":320,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":321,"_13":61,"_32":33,"_34":322,"_23":24,"_189":-5,"_26":323},{"_41":312,"_31":313,"_29":314,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":315,"_13":61,"_32":33,"_34":316,"_23":24,"_189":-5,"_26":317},{"_41":306,"_31":307,"_29":308,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":309,"_13":61,"_32":33,"_34":310,"_23":24,"_189":-5,"_26":311},{"_41":298,"_31":299,"_29":300,"_184":-5,"_39":40,"_38":301,"_186":57,"_36":302,"_13":303,"_32":33,"_34":304,"_23":24,"_189":-5,"_26":305},{"_41":290,"_31":291,"_29":292,"_184":-5,"_39":40,"_38":293,"_186":57,"_36":294,"_13":61,"_32":295,"_34":296,"_23":24,"_189":-5,"_26":297},{"_41":284,"_31":285,"_29":286,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":287,"_13":61,"_32":33,"_34":288,"_23":24,"_189":-5,"_26":289},{"_41":278,"_31":279,"_29":280,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":281,"_13":61,"_32":33,"_34":282,"_23":24,"_189":-5,"_26":283},{"_41":275,"_31":27,"_29":30,"_184":-5,"_39":40,"_38":14,"_186":57,"_36":276,"_13":61,"_32":33,"_34":35,"_23":24,"_189":-5,"_26":277},{"_41":269,"_31":270,"_29":271,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":272,"_13":61,"_32":33,"_34":273,"_23":24,"_189":-5,"_26":274},{"_41":263,"_31":264,"_29":265,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":266,"_13":61,"_32":33,"_34":267,"_23":24,"_189":-5,"_26":268},{"_41":257,"_31":258,"_29":259,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":260,"_13":61,"_32":33,"_34":261,"_23":24,"_189":-5,"_26":262},{"_41":251,"_31":252,"_29":253,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":254,"_13":61,"_32":33,"_34":255,"_23":24,"_189":-5,"_26":256},{"_41":245,"_31":246,"_29":247,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":248,"_13":61,"_32":33,"_34":249,"_23":24,"_189":-5,"_26":250},{"_41":239,"_31":240,"_29":241,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":242,"_13":61,"_32":33,"_34":243,"_23":24,"_189":-5,"_26":244},{"_41":233,"_31":234,"_29":235,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":236,"_13":61,"_32":33,"_34":237,"_23":24,"_189":-5,"_26":238},{"_41":227,"_31":228,"_29":229,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":230,"_13":61,"_32":33,"_34":231,"_23":24,"_189":-5,"_26":232},{"_41":221,"_31":222,"_29":223,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":224,"_13":61,"_32":33,"_34":225,"_23":24,"_189":-5,"_26":226},{"_41":215,"_31":216,"_29":217,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":218,"_13":61,"_32":33,"_34":219,"_23":24,"_189":-5,"_26":220},{"_41":209,"_31":210,"_29":211,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":212,"_13":61,"_32":33,"_34":213,"_23":24,"_189":-5,"_26":214},{"_41":203,"_31":204,"_29":205,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":206,"_13":61,"_32":33,"_34":207,"_23":24,"_189":-5,"_26":208},{"_41":197,"_31":198,"_29":199,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":200,"_13":61,"_32":33,"_34":201,"_23":24,"_189":-5,"_26":202},{"_41":191,"_31":192,"_29":193,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":194,"_13":61,"_32":33,"_34":195,"_23":24,"_189":-5,"_26":196},{"_41":181,"_31":182,"_29":183,"_184":-5,"_39":40,"_38":185,"_186":57,"_36":187,"_13":61,"_32":33,"_34":188,"_23":24,"_189":-5,"_26":190},"3371817a-97d8-40fe-8619-cce48b74f799","vault_bridge.ts","01a07f42-c11a-7588-86ec-6d5c3217d56e","parentId",1,"latest",["D",1788841476385],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst BRIDGE_VERSION = \"0.6.0\";\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst OBJECT_TYPES = new Set([\"conversation\", \"checkpoint\", \"knowledge\", \"entity\", \"project\", \"artifact\", \"concept\"]);\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_.:-]{1,160}$/.test(value);\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 10) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction clip(value: unknown, max: number) {\n return typeof value === \"string\" ? value.trim().slice(0, max) : \"\";\n}\n\nfunction stringList(value: unknown, maxItems = 12, maxLen = 120) {\n if (!Array.isArray(value)) return [];\n return [...new Set(value.map((v) => clip(v, maxLen)).filter(Boolean))].slice(0, maxItems);\n}\n\nfunction objectType(value: unknown) {\n const type = clip(value, 40).toLowerCase();\n return OBJECT_TYPES.has(type) ? type : \"\";\n}\n\nfunction deterministicId(prefix: string, requestId: string) {\n const id = `${prefix}_${requestId}`.replace(/[^A-Za-z0-9_.:-]/g, \"_\").slice(0, 160);\n if (!safeId(id)) throw new Error(\"INVALID_DETERMINISTIC_ID\");\n return id;\n}\n\nasync function claimOne() {\n await control.execute(`CREATE TABLE IF NOT EXISTS vault_bridge_requests (\n id TEXT PRIMARY KEY,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n status TEXT NOT NULL,\n action TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n result_json TEXT,\n error TEXT,\n attempt_count INTEGER NOT NULL DEFAULT 0\n )`);\n await control.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_bridge_requests_status_created ON vault_bridge_requests(status, created_at)\");\n await control.execute(`UPDATE vault_bridge_requests\n SET status=CASE WHEN attempt_count >= 2 THEN 'FAIL' ELSE 'PENDING' END,\n error=CASE WHEN attempt_count >= 2 THEN 'STALE_LEASE_RETRY_BUDGET_EXHAUSTED' ELSE 'STALE_LEASE_RECOVERED' END,\n updated_at=datetime('now')\n WHERE status='RUNNING' AND updated_at < datetime('now','-2 minutes')`);\n await control.execute(`UPDATE vault_bridge_requests SET status='FAIL', error='RETRY_BUDGET_EXHAUSTED', updated_at=datetime('now')\n WHERE status='PENDING' AND attempt_count >= 2`);\n const result = await control.execute(`UPDATE vault_bridge_requests\n SET status='RUNNING', updated_at=datetime('now'), attempt_count=attempt_count+1\n WHERE id=(SELECT id FROM vault_bridge_requests WHERE status='PENDING' AND attempt_count < 2 ORDER BY created_at ASC LIMIT 1)\n AND status='PENDING' AND attempt_count < 2\n RETURNING id,action,payload_json,attempt_count,created_at`);\n return result.rows[0] as any | undefined;\n}\n\nasync function finish(id: string, status: \"PASS\" | \"FAIL\" | \"BLOCKED\", result: unknown, error: string | null = null) {\n const resultJson = JSON.stringify(result).slice(0, 100_000);\n await control.execute({\n sql: `UPDATE vault_bridge_requests SET status=?, result_json=?, error=?, updated_at=datetime('now') WHERE id=?`,\n args: [status, resultJson, error, id],\n });\n}\n\nasync function searchOne(query: string, limit: number) {\n const match = ftsQuery(query);\n if (!match) return { conversations: [], checkpoints: [], knowledge: [] };\n\n const conversations = await db.execute({\n sql: `WITH hits AS (\n SELECT conversation_id,message_id,role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 36) AS hit_snippet,\n bm25(vault_messages_fts, 6.0,0.0,2.5,0.0,1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 160\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn FROM hits\n )\n SELECT c.id,c.title,c.create_time,c.update_time,c.message_count,b.message_id,b.role,b.hit_snippet,b.rank\n FROM best b JOIN conversations c ON c.id=b.conversation_id\n WHERE b.rn=1\n ORDER BY b.rank,c.update_time DESC\n LIMIT ?`,\n args: [match, limit],\n });\n\n const checkpoints = await db.execute({\n sql: `SELECT checkpoint_id AS id,project,title,\n snippet(vault_checkpoints_fts,3,'','',' … ',36) AS hit_snippet,\n bm25(vault_checkpoints_fts,0.0,3.0,5.0,2.0,2.0,1.5,1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT ?`,\n args: [match, limit],\n });\n\n const knowledge = await db.execute({\n sql: `SELECT knowledge_id AS id,project,kind,title,\n snippet(vault_knowledge_fts,4,'','',' … ',36) AS hit_snippet,\n bm25(vault_knowledge_fts,0.0,2.0,2.0,5.0,3.0,1.5,1.5) AS rank\n FROM vault_knowledge_fts\n WHERE vault_knowledge_fts MATCH ?\n ORDER BY rank\n LIMIT ?`,\n args: [match, limit],\n });\n\n return {\n conversations: conversations.rows.map((r: any) => ({\n type: \"conversation\", id: r.id, title: r.title, project: null, kind: null,\n createTime: r.create_time, updateTime: r.update_time, messageCount: Number(r.message_count ?? 0),\n messageId: r.message_id, role: r.role,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n checkpoints: checkpoints.rows.map((r: any) => ({\n type: \"checkpoint\", id: r.id, project: r.project, kind: \"checkpoint\", title: r.title,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n knowledge: knowledge.rows.map((r: any) => ({\n type: \"knowledge\", id: r.id, project: r.project, kind: r.kind, title: r.title,\n snippet: String(r.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(), rank: Number(r.rank ?? 0),\n })),\n };\n}\n\nasync function search(payload: any) {\n const query = clip(payload?.query, 200);\n const limit = Math.min(10, Math.max(1, Number(payload?.limit ?? 6) || 6));\n if (query.length < 2) throw new Error(\"QUERY_TOO_SHORT\");\n const results = await searchOne(query, limit);\n return { query, engine: \"fts5_bm25\", ...results };\n}\n\nasync function searchHybrid(payload: any) {\n const query = clip(payload?.query, 200);\n if (query.length < 2) throw new Error(\"QUERY_TOO_SHORT\");\n const variants = stringList(payload?.variants, 8, 200).filter((v) => v.toLocaleLowerCase() !== query.toLocaleLowerCase());\n const projects = new Set(stringList(payload?.projects, 6, 120).map((v) => v.toLocaleLowerCase()));\n const kinds = new Set(stringList(payload?.kinds, 10, 80).map((v) => v.toLocaleLowerCase()));\n const limit = Math.min(15, Math.max(1, Number(payload?.limit ?? 8) || 8));\n const queries = [query, ...variants];\n const fused = new Map();\n\n for (let qi = 0; qi < queries.length; qi++) {\n const q = queries[qi];\n const weight = qi === 0 ? 2.0 : 1.0;\n const result = await searchOne(q, 20);\n const groups = [result.conversations, result.checkpoints, result.knowledge];\n for (const group of groups) {\n for (let position = 0; position < group.length; position++) {\n const item: any = group[position];\n if (projects.size && (!item.project || !projects.has(String(item.project).toLocaleLowerCase()))) continue;\n if (kinds.size && (!item.kind || !kinds.has(String(item.kind).toLocaleLowerCase()))) continue;\n const key = `${item.type}:${item.id}`;\n const rrf = weight / (60 + position + 1);\n const existing = fused.get(key) ?? { ...item, score: 0, matchedQueries: [] as string[] };\n existing.score += rrf;\n if (!existing.matchedQueries.includes(q)) existing.matchedQueries.push(q);\n if (String(item.snippet ?? \"\").length > String(existing.snippet ?? \"\").length) existing.snippet = item.snippet;\n fused.set(key, existing);\n }\n }\n }\n\n const items = [...fused.values()]\n .filter((item) => {\n if (projects.size && item.type !== \"conversation\" && item.project && !projects.has(String(item.project).toLocaleLowerCase())) return false;\n if (kinds.size && item.type !== \"conversation\" && item.kind && !kinds.has(String(item.kind).toLocaleLowerCase())) return false;\n return true;\n })\n .sort((a, b) => b.score - a.score || String(a.title).localeCompare(String(b.title)))\n .slice(0, limit);\n\n return {\n query,\n variants,\n engine: \"fts5_bm25_rrf\",\n expansionSource: \"chat_control_plane\",\n filters: { projects: [...projects], kinds: [...kinds] },\n items,\n };\n}\n\nasync function getConversation(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_CONVERSATION_ID\");\n const maxMessages = Math.min(80, Math.max(1, Number(payload?.maxMessages ?? 40) || 40));\n const maxChars = Math.min(60_000, Math.max(2_000, Number(payload?.maxChars ?? 20_000) || 20_000));\n const conversation = await db.execute({\n sql: `SELECT id,title,create_time,update_time,message_count,source_file,imported_at FROM conversations WHERE id=? LIMIT 1`,\n args: [id],\n });\n if (!conversation.rows.length) throw new Error(\"CONVERSATION_NOT_FOUND\");\n const messages = await db.execute({\n sql: `SELECT id,seq,role,create_time,content_text FROM vault_messages WHERE conversation_id=? ORDER BY seq ASC LIMIT ?`,\n args: [id, maxMessages],\n });\n let used = 0;\n const clippedMessages: any[] = [];\n for (const row of messages.rows as any[]) {\n const remaining = maxChars - used;\n if (remaining <= 0) break;\n const text = String(row.content_text ?? \"\").slice(0, remaining);\n used += text.length;\n clippedMessages.push({ id: row.id, seq: Number(row.seq), role: row.role, createTime: row.create_time, content: text });\n }\n return { ...(conversation.rows[0] as any), messages: clippedMessages, returnedChars: used, truncatedByBridge: messages.rows.length > clippedMessages.length || used >= maxChars };\n}\n\nasync function getKnowledge(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_KNOWLEDGE_ID\");\n const item = await db.execute({\n sql: `SELECT id,project,kind,title,body,tags_json,entities_json,source_type,source_id,evidence_state,created_at,updated_at FROM vault_knowledge_items WHERE id=? LIMIT 1`,\n args: [id],\n });\n if (!item.rows.length) throw new Error(\"KNOWLEDGE_NOT_FOUND\");\n const relations = await db.execute({\n sql: `SELECT source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at\n FROM vault_relations WHERE (source_type='knowledge' AND source_id=?) OR (target_type='knowledge' AND target_id=?)\n ORDER BY weight DESC, relation LIMIT 60`,\n args: [id, id],\n });\n const row: any = item.rows[0];\n return {\n ...row,\n tags: JSON.parse(String(row.tags_json || \"[]\")),\n entities: JSON.parse(String(row.entities_json || \"[]\")),\n relations: relations.rows,\n };\n}\n\nasync function related(payload: any) {\n const type = objectType(payload?.type);\n const id = clip(payload?.id, 160);\n const limit = Math.min(80, Math.max(1, Number(payload?.limit ?? 30) || 30));\n if (!type || !safeId(id)) throw new Error(\"VALID_TYPE_AND_ID_REQUIRED\");\n const rows = await db.execute({\n sql: `SELECT source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at\n FROM vault_relations WHERE (source_type=? AND source_id=?) OR (target_type=? AND target_id=?)\n ORDER BY weight DESC, updated_at DESC LIMIT ?`,\n args: [type, id, type, id, limit],\n });\n return { type, id, relations: rows.rows };\n}\n\nasync function stats() {\n const result = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations,\n (SELECT COALESCE(SUM(content_bytes),0) FROM conversations) AS source_content_bytes`);\n return { ...(result.rows[0] as any), activeProvider: storage.activeProvider, bridgeVersion: BRIDGE_VERSION };\n}\n\nasync function upsertCheckpoint(payload: any, requestId: string) {\n const project = clip(payload?.project, 120);\n const title = clip(payload?.title, 240);\n const summary = clip(payload?.summary, 12_000);\n if (!project || !title || !summary) throw new Error(\"PROJECT_TITLE_SUMMARY_REQUIRED\");\n let id = clip(payload?.id, 160);\n if (!safeId(id)) id = deterministicId(\"cp_bridge\", requestId);\n const decisions = clip(payload?.decisions, 12_000);\n const openGaps = clip(payload?.openGaps, 12_000);\n const nextAction = clip(payload?.nextAction, 12_000);\n const evidenceState = clip(payload?.evidenceState, 80) || \"CHECKPOINT\";\n const sourceConversationId = safeId(payload?.sourceConversationId) ? payload.sourceConversationId : null;\n const now = new Date().toISOString();\n await db.batch([\n {\n sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,title=excluded.title,summary=excluded.summary,decisions=excluded.decisions,open_gaps=excluded.open_gaps,next_action=excluded.next_action,source_conversation_id=excluded.source_conversation_id,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,project,title,summary,decisions,openGaps,nextAction,sourceConversationId,evidenceState,now,now],\n },\n { sql: `DELETE FROM vault_checkpoints_fts WHERE checkpoint_id=?`, args: [id] },\n { sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)`, args: [id,project,title,summary,decisions,openGaps,nextAction] },\n ]);\n return { id, project, title, evidenceState, updatedAt: now };\n}\n\nasync function upsertKnowledge(payload: any, requestId: string) {\n const project = clip(payload?.project, 120);\n const kind = clip(payload?.kind, 80).toLowerCase();\n const title = clip(payload?.title, 240);\n const body = clip(payload?.body, 20_000);\n if (!project || !kind || !title || !body) throw new Error(\"PROJECT_KIND_TITLE_BODY_REQUIRED\");\n let id = clip(payload?.id, 160);\n if (!safeId(id)) id = deterministicId(\"kn_bridge\", requestId);\n const tags = stringList(payload?.tags, 24, 80);\n const entities = stringList(payload?.entities, 24, 120);\n const evidenceState = clip(payload?.evidenceState, 80) || \"KNOWLEDGE\";\n const sourceType = objectType(payload?.sourceType) || null;\n const sourceId = safeId(payload?.sourceId) ? payload.sourceId : null;\n if ((sourceType && !sourceId) || (!sourceType && sourceId)) throw new Error(\"SOURCE_TYPE_AND_ID_MUST_PAIR\");\n const now = new Date().toISOString();\n const relationsInput = Array.isArray(payload?.relations) ? payload.relations.slice(0, 24) : [];\n const relationStatements: any[] = [\n { sql: `DELETE FROM vault_relations WHERE source_type='knowledge' AND source_id=?`, args: [id] },\n ];\n for (let index = 0; index < relationsInput.length; index++) {\n const rel = relationsInput[index] ?? {};\n const relation = clip(rel.relation, 80).toLowerCase().replace(/[^a-z0-9_.:-]/g, \"_\");\n const targetType = objectType(rel.targetType);\n const targetId = clip(rel.targetId, 160);\n if (!relation || !targetType || !safeId(targetId)) throw new Error(`INVALID_RELATION_${index}`);\n const weightRaw = Number(rel.weight ?? 1);\n const weight = Number.isFinite(weightRaw) ? Math.max(0, Math.min(10, weightRaw)) : 1;\n const provenance = clip(rel.provenance, 500);\n const relationId = `rel_${id}_${relation}_${targetType}_${targetId}`.replace(/[^A-Za-z0-9_.:-]/g, \"_\").slice(0, 160);\n relationStatements.push({\n sql: `INSERT INTO vault_relations(id,source_type,source_id,relation,target_type,target_id,weight,provenance,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(source_type,source_id,relation,target_type,target_id) DO UPDATE SET weight=excluded.weight,provenance=excluded.provenance,updated_at=excluded.updated_at`,\n args: [relationId,\"knowledge\",id,relation,targetType,targetId,weight,provenance,now,now],\n });\n }\n\n await db.batch([\n {\n sql: `INSERT INTO vault_knowledge_items(id,project,kind,title,body,tags_json,entities_json,source_type,source_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,kind=excluded.kind,title=excluded.title,body=excluded.body,tags_json=excluded.tags_json,entities_json=excluded.entities_json,source_type=excluded.source_type,source_id=excluded.source_id,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,project,kind,title,body,JSON.stringify(tags),JSON.stringify(entities),sourceType,sourceId,evidenceState,now,now],\n },\n { sql: `DELETE FROM vault_knowledge_fts WHERE knowledge_id=?`, args: [id] },\n { sql: `INSERT INTO vault_knowledge_fts(knowledge_id,project,kind,title,body,tags,entities) VALUES(?,?,?,?,?,?,?)`, args: [id,project,kind,title,body,tags.join(\" \"),entities.join(\" \")] },\n ...relationStatements,\n ]);\n return { id, project, kind, title, tags, entities, relationCount: relationsInput.length, evidenceState, updatedAt: now };\n}\n\nfunction decimalString(value: unknown) {\n const raw = clip(value, 64);\n if (!/^-?(?:0|[1-9]\\d*)(?:\\.\\d+)?$/.test(raw)) throw new Error(\"INVALID_DECIMAL_STRING\");\n return raw;\n}\n\nfunction isoOrNull(value: unknown) {\n const raw = clip(value, 64);\n if (!raw) return null;\n const ms = Date.parse(raw);\n if (!Number.isFinite(ms)) throw new Error(\"INVALID_DATETIME\");\n return new Date(ms).toISOString();\n}\n\nfunction httpsOrNull(value: unknown) {\n const raw = clip(value, 2048);\n if (!raw) return null;\n const u = new URL(raw);\n if (u.protocol !== \"https:\") throw new Error(\"HTTPS_URL_REQUIRED\");\n return u.toString();\n}\n\nasync function payanaStateUpsert(payload: any) {\n const key = clip(payload?.key, 120);\n if (!safeId(key)) throw new Error(\"INVALID_PAYANA_STATE_KEY\");\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const sourceRef = clip(payload?.sourceRef, 500) || null;\n const value = payload?.value ?? null;\n const valueJson = JSON.stringify(value);\n if (valueJson.length > 40_000) throw new Error(\"PAYANA_STATE_VALUE_TOO_LARGE\");\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at)\n VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [key,valueJson,evidenceState,sourceRef,now,now],\n });\n return { key, evidenceState, updatedAt: now };\n}\n\nasync function payanaOpportunityUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n const title = clip(payload?.title, 240);\n if (!safeId(id) || !title) throw new Error(\"PAYANA_OPPORTUNITY_ID_TITLE_REQUIRED\");\n const platform = clip(payload?.platform, 120) || null;\n const url = httpsOrNull(payload?.url);\n const status = clip(payload?.status, 80) || \"UNVERIFIED\";\n const rewardMin = payload?.rewardMin == null || payload?.rewardMin === \"\" ? null : decimalString(payload.rewardMin);\n const rewardMax = payload?.rewardMax == null || payload?.rewardMax === \"\" ? null : decimalString(payload.rewardMax);\n const currency = clip(payload?.currency, 20).toUpperCase() || null;\n const kycState = clip(payload?.kycState, 80) || null;\n const capitalState = clip(payload?.capitalState, 80) || null;\n const deadlineAt = isoOrNull(payload?.deadlineAt);\n const constraints = stringList(payload?.constraints, 40, 500);\n const currentnessAt = isoOrNull(payload?.currentnessAt);\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const sourceRef = clip(payload?.sourceRef, 1000) || null;\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [id,title,platform,url,status,rewardMin,rewardMax,currency,kycState,capitalState,deadlineAt,JSON.stringify(constraints),currentnessAt,evidenceState,sourceRef,now,now],\n });\n return { id,title,status,rewardMin,rewardMax,currency,evidenceState,updatedAt:now };\n}\n\nasync function payanaEconomicUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_PAYANA_ECONOMIC_ID\");\n const opportunityId = safeId(payload?.opportunityId) ? String(payload.opportunityId) : null;\n const eventType = clip(payload?.eventType, 80) || \"REVENUE\";\n const amount = decimalString(payload?.amount);\n const currency = clip(payload?.currency, 20).toUpperCase();\n if (!currency) throw new Error(\"PAYANA_ECONOMIC_CURRENCY_REQUIRED\");\n const platform = clip(payload?.platform, 120) || null;\n const occurredAt = isoOrNull(payload?.occurredAt);\n const externalRef = clip(payload?.externalRef, 500) || null;\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const evidenceRefs = stringList(payload?.evidenceRefs, 20, 1000);\n const notes = clip(payload?.notes, 4000) || null;\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_economic_events(id,opportunity_id,event_type,amount_decimal,currency,platform,occurred_at,external_ref,evidence_state,evidence_refs_json,notes,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET opportunity_id=excluded.opportunity_id,event_type=excluded.event_type,amount_decimal=excluded.amount_decimal,currency=excluded.currency,platform=excluded.platform,occurred_at=excluded.occurred_at,external_ref=excluded.external_ref,evidence_state=excluded.evidence_state,evidence_refs_json=excluded.evidence_refs_json,notes=excluded.notes,updated_at=excluded.updated_at`,\n args: [id,opportunityId,eventType,amount,currency,platform,occurredAt,externalRef,evidenceState,JSON.stringify(evidenceRefs),notes,now,now],\n });\n return { id,eventType,amount,currency,evidenceState,updatedAt:now };\n}\n\nasync function payanaActionUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n if (!safeId(id)) throw new Error(\"INVALID_PAYANA_ACTION_ID\");\n const opportunityId = safeId(payload?.opportunityId) ? String(payload.opportunityId) : null;\n const actionType = clip(payload?.actionType, 80);\n if (!actionType) throw new Error(\"PAYANA_ACTION_TYPE_REQUIRED\");\n const status = clip(payload?.status, 80) || \"UNVERIFIED\";\n const riskClass = clip(payload?.riskClass, 80) || \"read_only\";\n const approvalState = clip(payload?.approvalState, 80) || \"NOT_REQUIRED\";\n const reversible = payload?.reversible === true ? 1 : 0;\n const inputSummary = clip(payload?.inputSummary, 4000) || null;\n const outputSummary = clip(payload?.outputSummary, 4000) || null;\n const receiptId = safeId(payload?.receiptId) ? String(payload.receiptId) : null;\n const startedAt = isoOrNull(payload?.startedAt);\n const finishedAt = isoOrNull(payload?.finishedAt);\n const evidenceState = clip(payload?.evidenceState, 80) || \"UNVERIFIED\";\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET opportunity_id=excluded.opportunity_id,action_type=excluded.action_type,status=excluded.status,risk_class=excluded.risk_class,approval_state=excluded.approval_state,reversible=excluded.reversible,input_summary=excluded.input_summary,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,started_at=excluded.started_at,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [id,opportunityId,actionType,status,riskClass,approvalState,reversible,inputSummary,outputSummary,receiptId,startedAt,finishedAt,evidenceState,now,now],\n });\n return { id,actionType,status,riskClass,approvalState,reversible:Boolean(reversible),evidenceState,updatedAt:now };\n}\n\nasync function payanaReceiptUpsert(payload: any) {\n const id = clip(payload?.id, 160);\n const subjectType = clip(payload?.subjectType, 80);\n const subjectId = clip(payload?.subjectId, 160);\n const receiptType = clip(payload?.receiptType, 80);\n if (!safeId(id) || !subjectType || !safeId(subjectId) || !receiptType) throw new Error(\"INVALID_PAYANA_RECEIPT\");\n const locator = clip(payload?.locator, 2000) || null;\n const sha256Raw = clip(payload?.sha256, 64).toLowerCase();\n const sha256 = sha256Raw ? (/^[a-f0-9]{64}$/.test(sha256Raw) ? sha256Raw : (() => { throw new Error(\"INVALID_SHA256\"); })()) : null;\n const receiptPayload = payload?.payload ?? {};\n const payloadJson = JSON.stringify(receiptPayload);\n if (payloadJson.length > 40_000) throw new Error(\"PAYANA_RECEIPT_PAYLOAD_TOO_LARGE\");\n const verificationState = clip(payload?.verificationState, 80) || \"UNVERIFIED\";\n const verifiedAt = isoOrNull(payload?.verifiedAt);\n const now = new Date().toISOString();\n await db.execute({\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET subject_type=excluded.subject_type,subject_id=excluded.subject_id,receipt_type=excluded.receipt_type,locator=excluded.locator,sha256=excluded.sha256,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [id,subjectType,subjectId,receiptType,locator,sha256,payloadJson,verificationState,verifiedAt,now,now],\n });\n return { id,subjectType,subjectId,receiptType,verificationState,verifiedAt,updatedAt:now };\n}\n\nasync function payanaSnapshot(payload: any) {\n const recent = Math.min(50, Math.max(1, Number(payload?.limit ?? 20) || 20));\n const counts = await db.execute(`SELECT\n (SELECT COUNT(*) FROM payana_state) AS state_items,\n (SELECT COUNT(*) FROM payana_opportunities) AS opportunities,\n (SELECT COUNT(*) FROM payana_economic_events) AS economic_events,\n (SELECT COUNT(*) FROM payana_actions) AS actions,\n (SELECT COUNT(*) FROM payana_receipts) AS receipts`);\n const state = await db.execute({sql:`SELECT key,value_json,evidence_state,source_ref,updated_at FROM payana_state ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const opportunities = await db.execute({sql:`SELECT id,title,platform,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,currentness_at,evidence_state,updated_at FROM payana_opportunities ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const economic = await db.execute({sql:`SELECT id,opportunity_id,event_type,amount_decimal,currency,platform,occurred_at,external_ref,evidence_state,evidence_refs_json,notes,updated_at FROM payana_economic_events ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const actions = await db.execute({sql:`SELECT id,opportunity_id,action_type,status,risk_class,approval_state,reversible,receipt_id,started_at,finished_at,evidence_state,updated_at FROM payana_actions ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n const receipts = await db.execute({sql:`SELECT id,subject_type,subject_id,receipt_type,locator,sha256,verification_state,verified_at,updated_at FROM payana_receipts ORDER BY updated_at DESC LIMIT ?`,args:[recent]});\n return { schemaVersion:\"payana-ledger-1.0.0\", counts:counts.rows[0], state:state.rows, opportunities:opportunities.rows, economicEvents:economic.rows, actions:actions.rows, receipts:receipts.rows };\n}\n\nconst request = await claimOne();\nif (!request) {\n console.log(JSON.stringify({ status: \"NO_PENDING_BRIDGE_REQUEST\", bridgeVersion: BRIDGE_VERSION }));\n} else {\n const id = String(request.id);\n try {\n const payload = JSON.parse(String(request.payload_json || \"{}\"));\n let result: unknown;\n let blocked = false;\n switch (String(request.action)) {\n case \"search\": result = await search(payload); break;\n case \"search_hybrid\": result = await searchHybrid(payload); break;\n case \"get_conversation\": result = await getConversation(payload); break;\n case \"get_knowledge\": result = await getKnowledge(payload); break;\n case \"related\": result = await related(payload); break;\n case \"stats\": result = await stats(); break;\n case \"checkpoint_upsert\": result = await upsertCheckpoint(payload, id); break;\n case \"knowledge_upsert\": result = await upsertKnowledge(payload, id); break;\n case \"payana_state_upsert\": result = await payanaStateUpsert(payload); break;\n case \"payana_opportunity_upsert\": result = await payanaOpportunityUpsert(payload); break;\n case \"payana_economic_upsert\": result = await payanaEconomicUpsert(payload); break;\n case \"payana_action_upsert\": result = await payanaActionUpsert(payload); break;\n case \"payana_receipt_upsert\": result = await payanaReceiptUpsert(payload); break;\n case \"payana_snapshot\": result = await payanaSnapshot(payload); break;\n default: {\n const envelope = { status: \"BLOCKED\", id, action: request.action, error: \"ACTION_NOT_ALLOWED\", bridgeVersion: BRIDGE_VERSION };\n await finish(id, \"BLOCKED\", envelope, \"ACTION_NOT_ALLOWED\");\n console.log(JSON.stringify(envelope));\n blocked = true;\n }\n }\n if (!blocked) {\n const envelope = { status: \"PASS\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, activeProvider: storage.activeProvider, result };\n await finish(id, \"PASS\", envelope);\n console.log(JSON.stringify(envelope));\n }\n } catch (error) {\n const message = error instanceof Error ? error.message.slice(0, 500) : String(error).slice(0, 500);\n const envelope = { status: \"FAIL\", id, action: request.action, bridgeVersion: BRIDGE_VERSION, error: message };\n await finish(id, \"FAIL\", envelope, message);\n console.log(JSON.stringify(envelope));\n }\n}\n","label",[182],"c709f52c-5526-489a-841e-fa89703a791a","v07_zip64_selftest.ts","01a07f42-c11a-7588-86ec-6b35d801744d",["D",1788841476385],"import { readZipDirectory, readZipEntryText } from \"./frontend/zip_selective_reader.ts\";\n\nfunction crc32(bytes: Uint8Array) {\n let crc = 0xffffffff;\n for (let i = 0; i < bytes.length; i++) {\n crc ^= bytes[i];\n for (let bit = 0; bit < 8; bit++) crc = (crc >>> 1) ^ (0xedb88320 & -(crc & 1));\n }\n return (crc ^ 0xffffffff) >>> 0;\n}\n\nconst out: number[] = [];\nconst u16 = (v: number) => { out.push(v & 255, (v >>> 8) & 255); };\nconst u32 = (v: number) => { out.push(v & 255, (v >>> 8) & 255, (v >>> 16) & 255, (v >>> 24) & 255); };\nconst u64 = (v: number) => { const low = v >>> 0; const high = Math.floor(v / 0x100000000) >>> 0; u32(low); u32(high); };\nconst bytes = (b: Uint8Array) => { for (const x of b) out.push(x); };\n\nconst enc = new TextEncoder();\nconst name = enc.encode(\"conversations.json\");\nconst payloadText = JSON.stringify([{ id: \"zip64_demo\", title: \"ZIP64 synthetic\", mapping: {} }]);\nconst payload = enc.encode(payloadText);\nconst crc = crc32(payload);\n\nconst localOffset = out.length;\nu32(0x04034b50); u16(45); u16(0); u16(0); u16(0); u16(0); u32(crc); u32(payload.length); u32(payload.length); u16(name.length); u16(0); bytes(name); bytes(payload);\n\nconst centralOffset = out.length;\nu32(0x02014b50); u16(45); u16(45); u16(0); u16(0); u16(0); u16(0); u32(crc);\nu32(0xffffffff); u32(0xffffffff); u16(name.length); u16(28); u16(0); u16(0); u16(0); u32(0); u32(0xffffffff); bytes(name);\nu16(0x0001); u16(24); u64(payload.length); u64(payload.length); u64(localOffset);\nconst centralSize = out.length - centralOffset;\n\nconst zip64EocdOffset = out.length;\nu32(0x06064b50); u64(44); u16(45); u16(45); u32(0); u32(0); u64(1); u64(1); u64(centralSize); u64(centralOffset);\nconst locatorOffset = out.length;\nu32(0x07064b50); u32(0); u64(zip64EocdOffset); u32(1);\nconst eocdOffset = out.length;\nu32(0x06054b50); u16(0); u16(0); u16(0xffff); u16(0xffff); u32(0xffffffff); u32(0xffffffff); u16(0);\n\nconst archive = new Uint8Array(out);\nconst blob = new Blob([archive], { type: \"application/zip\" });\nconst entries = await readZipDirectory(blob);\nconst text = entries.length === 1 ? await readZipEntryText(blob, entries[0]) : \"\";\n\nlet multidiskBlocked = false;\nconst mutated = archive.slice();\nmutated[locatorOffset + 4] = 1;\ntry { await readZipDirectory(new Blob([mutated])); } catch (err) { multidiskBlocked = String((err as Error).message).includes(\"ZIP_MULTIDISK_UNSUPPORTED\"); }\n\nconst pass = entries.length === 1 &&\n entries[0].name === \"conversations.json\" &&\n entries[0].zip64 === true &&\n entries[0].compressedSize === payload.length &&\n entries[0].uncompressedSize === payload.length &&\n entries[0].localHeaderOffset === 0 &&\n text === payloadText &&\n multidiskBlocked;\n\nconst result = { pass, archiveBytes: archive.length, centralOffset, centralSize, zip64EocdOffset, locatorOffset, eocdOffset, entry: entries[0], textMatches: text === payloadText, multidiskBlocked };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[192],"fba7ed8c-03ff-4645-a4bb-20e5b47e9d07","v07_preflight_selftest.ts","01a07f42-c11a-7588-86ec-67d867160492",["D",1788841476385],"import { buildPreflight, preflightGate, preflightScopeKey } from \"./frontend/preflight.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst counts = async () => {\n const r = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_import_runs) AS import_runs,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items`);\n return r.rows[0] as any;\n};\n\nconst before = await counts();\nconst huge = \"x\".repeat(180_001);\nconst candidates: any[] = [\n {\n sourceFile: \"synthetic::conversations.json\",\n conv: {\n id: \"v07_good\",\n title: \"good\",\n current_node: \"m2\",\n mapping: {\n m1: { parent: null, message: { id: \"m1\", author: { role: \"user\" }, create_time: 1, content: { content_type: \"text\", parts: [\"hello\"] } } },\n m2: { parent: \"m1\", message: { id: \"m2\", author: { role: \"assistant\" }, create_time: 2, content: { content_type: \"text\", parts: [\"world\"] } } },\n },\n },\n },\n {\n sourceFile: \"synthetic::conversations-0001.json\",\n conv: {\n title: \"unkeyed unknown content\",\n mapping: {\n a: { parent: null, message: { id: \"a\", author: { role: \"tool\" }, create_time: 3, content: { content_type: \"brand_new_future_type\", parts: [\"future\"] } } },\n },\n },\n },\n {\n sourceFile: \"synthetic::conversations-0002.json\",\n conv: {\n id: \"v07_huge\",\n title: \"oversized\",\n current_node: \"h\",\n mapping: {\n h: { parent: null, message: { id: \"h\", author: { role: \"assistant\" }, create_time: 4, content: { content_type: \"text\", parts: [huge] } } },\n },\n },\n },\n];\n\nconst inventory: any = {\n inputFileCount: 1,\n inputNames: [\"synthetic.zip\"],\n sourceBytes: 2_000_000_000,\n zipCount: 1,\n jsonCount: 0,\n zipEntryCount: 10,\n conversationJsonCount: 3,\n otherFileCount: 7,\n candidateCount: 3,\n duplicateCandidateCount: 0,\n extensionBreakdown: [{ extension: \"png\", count: 7 }],\n};\n\nconst report = buildPreflight(candidates, inventory, 2);\nconst after = await counts();\nconst sameDb = JSON.stringify(before) === JSON.stringify(after);\nconst issue = (code: string) => report.issues.find((x) => x.code === code);\nconst fingerprintA = \"a\".repeat(64);\nconst fingerprintB = \"b\".repeat(64);\nconst reviewedKey = preflightScopeKey(fingerprintA, 25);\nconst gateSame = preflightGate(reviewedKey, fingerprintA, 25);\nconst gateDifferentLimit = preflightGate(reviewedKey, fingerprintA, 50);\nconst gateDifferentFingerprint = preflightGate(reviewedKey, fingerprintB, 25);\nconst pass = storage.activeProvider === \"turso\" &&\n gateSame.allowed === true &&\n gateDifferentLimit.allowed === false &&\n gateDifferentFingerprint.allowed === false &&\n sameDb &&\n report.candidateCount === 3 &&\n report.selectedCount === 2 &&\n report.explicitIdCount === 2 &&\n report.unkeyedCount === 1 &&\n report.mappingCount === 3 &&\n report.fallbackBranchCount === 1 &&\n report.textMessages === 4 &&\n report.messagesOverLimit === 1 &&\n report.unknownContentTypes.some((x) => x.contentType === \"brand_new_future_type\" && x.count === 1) &&\n issue(\"MISSING_EXPLICIT_ID\")?.severity === \"WARN\" &&\n issue(\"UNKNOWN_CONTENT_TYPES\")?.severity === \"WARN\" &&\n issue(\"MESSAGE_OVER_180K\")?.severity === \"WARN\" &&\n issue(\"LARGE_SOURCE_ZIP\")?.severity === \"INFO\" &&\n report.blocked === false;\n\nconst result = { pass, version: \"0.7.0\", activeProvider: storage.activeProvider, sameDbBeforeAfter: sameDb, gates: { sameScope: gateSame.allowed, differentLimit: gateDifferentLimit.allowed, differentFingerprint: gateDifferentFingerprint.allowed }, before, after, report };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[198],"835949c7-6bb2-4a92-9465-cd6d5d239121","v06_selftest.ts","01a07f42-c11a-7588-86ec-60a5c1cb2aff",["D",1788841476385],"import JSZip from \"npm:jszip@3.10.1\";\nimport { readExportFiles, scopedRunId } from \"./frontend/export_reader.ts\";\nimport { readZipDirectory } from \"./frontend/zip_selective_reader.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst zip = new JSZip();\nconst convA = [{ id: \"zip_demo_a\", title: \"ZIP demo A\", create_time: 1, update_time: 2, mapping: {} }];\nconst convB = [\n { id: \"zip_demo_b\", title: \"ZIP demo B\", create_time: 3, update_time: 4, mapping: {} },\n { id: \"zip_demo_c\", title: \"ZIP demo C\", create_time: 5, update_time: 6, mapping: {} },\n { id: \"zip_demo_a\", title: \"ZIP demo A newer duplicate\", create_time: 1, update_time: 7, mapping: {} },\n];\nzip.file(\"conversations.json\", JSON.stringify(convA));\nzip.file(\"nested/conversations-0001.json\", JSON.stringify(convB));\nzip.file(\"chat.html\", \"demo\");\nzip.file(\"assets/image.png\", new Uint8Array([1, 2, 3, 4]));\nzip.file(\"account/user.json\", JSON.stringify({ id: \"not-a-conversation-file\" }));\nconst bytes = await zip.generateAsync({ type: \"uint8array\", compression: \"DEFLATE\", compressionOptions: { level: 6 } });\nconst file = new File([bytes], \"synthetic-chatgpt-export.zip\", { type: \"application/zip\", lastModified: 1788730000000 });\nlet wholeFileArrayBufferAttempted = false;\nconst guardedFile = new Proxy(file, {\n get(target, prop) {\n if (prop === \"arrayBuffer\") return async () => { wholeFileArrayBufferAttempted = true; throw new Error(\"WHOLE_FILE_ARRAYBUFFER_FORBIDDEN\"); };\n const value = Reflect.get(target, prop, target);\n return typeof value === \"function\" ? value.bind(target) : value;\n },\n}) as File;\nconst parsed = await readExportFiles([guardedFile]);\nconst parsedAgain = await readExportFiles([guardedFile]);\nconst renamedFile = new File([bytes], \"same-export-redownloaded.zip\", { type: \"application/zip\", lastModified: 999 });\nconst parsedRenamed = await readExportFiles([renamedFile]);\nconst scopedOne = scopedRunId(parsed.runId, 1);\nconst scopedThree = scopedRunId(parsed.runId, 3);\nconst directory = await readZipDirectory(file);\nconst conversationMethods = directory.filter((entry) => entry.name.includes(\"conversations\")).map((entry) => entry.method);\n\nconst emptyZip = new JSZip();\nemptyZip.file(\"account/user.json\", JSON.stringify({ demo: true }));\nemptyZip.file(\"chat.html\", \"\");\nconst emptyBytes = await emptyZip.generateAsync({ type: \"uint8array\", compression: \"DEFLATE\" });\nlet missingConversationJsonBlocked = false;\ntry {\n await readExportFiles([new File([emptyBytes], \"no-conversations.zip\", { type: \"application/zip\", lastModified: 1 })]);\n} catch (error) {\n missingConversationJsonBlocked = String(error).includes(\"nenhum conversations*.json reconhecido\");\n}\n\nconst crcZip = new JSZip();\ncrcZip.file(\"conversations.json\", JSON.stringify(convA));\nconst crcBytes = await crcZip.generateAsync({ type: \"uint8array\", compression: \"STORE\" });\nconst crcFile = new File([crcBytes], \"crc-test.zip\", { type: \"application/zip\", lastModified: 2 });\nconst crcDirectory = await readZipDirectory(crcFile);\nconst crcEntry = crcDirectory.find((entry) => entry.name === \"conversations.json\");\nif (!crcEntry) throw new Error(\"CRC_FIXTURE_ENTRY_MISSING\");\nconst corruptBytes = crcBytes.slice();\nconst localView = new DataView(corruptBytes.buffer, corruptBytes.byteOffset, corruptBytes.byteLength);\nconst localNameLength = localView.getUint16(crcEntry.localHeaderOffset + 26, true);\nconst localExtraLength = localView.getUint16(crcEntry.localHeaderOffset + 28, true);\nconst payloadOffset = crcEntry.localHeaderOffset + 30 + localNameLength + localExtraLength;\ncorruptBytes[payloadOffset] ^= 0x01;\nlet crcMismatchBlocked = false;\ntry {\n await readExportFiles([new File([corruptBytes], \"crc-corrupt.zip\", { type: \"application/zip\", lastModified: 2 })]);\n} catch (error) {\n crcMismatchBlocked = String(error).includes(\"ZIP_CRC_MISMATCH\");\n}\n\nawait db.execute(`CREATE TABLE IF NOT EXISTS vault_import_runs (\n id TEXT PRIMARY KEY,\n source_fingerprint TEXT NOT NULL,\n source_name TEXT NOT NULL,\n source_size INTEGER NOT NULL DEFAULT 0,\n total_candidates INTEGER NOT NULL DEFAULT 0,\n cursor INTEGER NOT NULL DEFAULT 0,\n imported_count INTEGER NOT NULL DEFAULT 0,\n indexed_messages INTEGER NOT NULL DEFAULT 0,\n skipped_count INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'IN_PROGRESS',\n inventory_json TEXT NOT NULL DEFAULT '{}',\n last_error TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n)`);\nconst fixtureId = \"imp_v06_selftest_fixture\";\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nconst now = new Date().toISOString();\nawait db.execute({\n sql: `INSERT INTO vault_import_runs(id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,inventory_json,last_error,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [fixtureId, parsed.sourceFingerprint, parsed.sourceName, parsed.sourceSize, 100, 37, 36, 420, 1, \"PAUSED\", JSON.stringify(parsed.inventory), \"synthetic interruption\", now, now],\n});\nconst paused = await db.execute({ sql: \"SELECT * FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nawait db.execute({\n sql: `UPDATE vault_import_runs SET cursor=?, imported_count=?, indexed_messages=?, skipped_count=?, status='COMPLETE', last_error=NULL, updated_at=? WHERE id=?`,\n args: [100, 99, 1200, 1, new Date().toISOString(), fixtureId],\n});\nconst complete = await db.execute({ sql: \"SELECT cursor,imported_count,indexed_messages,skipped_count,status,last_error FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\nconst residue = await db.execute({ sql: \"SELECT COUNT(*) AS count FROM vault_import_runs WHERE id=?\", args: [fixtureId] });\n\nconst atomicFixtureId = \"imp_v06_atomic_replay_fixture\";\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [atomicFixtureId] });\nawait db.execute({\n sql: `INSERT INTO vault_import_runs(id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,inventory_json,last_error,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [atomicFixtureId, parsed.sourceFingerprint, \"atomic replay fixture\", 1, 3, 0, 0, 0, 0, \"IN_PROGRESS\", \"{}\", null, now, now],\n});\nconst advanceAtomic = async (cursorAfter: number, indexedDelta: number) => await db.execute({\n sql: `UPDATE vault_import_runs SET\n indexed_messages=indexed_messages + CASE WHEN cursor < ? THEN ? ELSE 0 END,\n cursor=MAX(cursor, ?),\n imported_count=MAX(imported_count, ?),\n status=CASE WHEN ? > cursor THEN CASE WHEN ? >= total_candidates THEN 'COMPLETE' ELSE 'IN_PROGRESS' END ELSE status END,\n last_error=CASE WHEN ? > cursor THEN NULL ELSE last_error END,\n updated_at=?\n WHERE id=? AND source_fingerprint=?\n RETURNING cursor,imported_count,indexed_messages,skipped_count,status`,\n args: [cursorAfter,indexedDelta,cursorAfter,cursorAfter,cursorAfter,cursorAfter,cursorAfter,new Date().toISOString(),atomicFixtureId,parsed.sourceFingerprint],\n});\nconst atomicFirst = await advanceAtomic(1, 2);\nconst atomicReplay = await advanceAtomic(1, 2);\nconst atomicSecond = await advanceAtomic(2, 3);\nconst atomicComplete = await advanceAtomic(3, 1);\nconst atomicCompleteReplay = await advanceAtomic(3, 1);\nawait db.execute({ sql: \"DELETE FROM vault_import_runs WHERE id=?\", args: [atomicFixtureId] });\nconst atomicResidue = await db.execute({ sql: \"SELECT COUNT(*) AS count FROM vault_import_runs WHERE id=?\", args: [atomicFixtureId] });\n\nconst ids = parsed.candidates.map((candidate: any) => String(candidate.conv?.id));\nconst keptDuplicateTitle = String(parsed.candidates.find((candidate: any) => candidate.conv?.id === \"zip_demo_a\")?.conv?.title ?? \"\");\nconst p: any = paused.rows[0] ?? {};\nconst c: any = complete.rows[0] ?? {};\nconst af: any = atomicFirst.rows[0] ?? {};\nconst ar: any = atomicReplay.rows[0] ?? {};\nconst as: any = atomicSecond.rows[0] ?? {};\nconst ac: any = atomicComplete.rows[0] ?? {};\nconst acr: any = atomicCompleteReplay.rows[0] ?? {};\nconst pass =\n storage.activeProvider === \"turso\" &&\n parsed.inventory.zipCount === 1 &&\n parsed.inventory.conversationJsonCount === 2 &&\n parsed.inventory.zipEntryCount === 5 &&\n parsed.inventory.otherFileCount === 3 &&\n parsed.inventory.candidateCount === 3 &&\n parsed.inventory.duplicateCandidateCount === 1 &&\n ids.join(\",\") === \"zip_demo_a,zip_demo_c,zip_demo_b\" &&\n keptDuplicateTitle === \"ZIP demo A newer duplicate\" &&\n wholeFileArrayBufferAttempted === false &&\n conversationMethods.length === 2 && conversationMethods.every((method) => method === 8) &&\n missingConversationJsonBlocked && crcMismatchBlocked &&\n parsed.sourceFingerprint === parsedAgain.sourceFingerprint &&\n parsed.sourceFingerprint === parsedRenamed.sourceFingerprint &&\n /^imp_[a-f0-9]{40}$/.test(parsed.runId) &&\n scopedOne === `${parsed.runId}_1` && scopedThree === `${parsed.runId}_3` && scopedOne !== scopedThree &&\n Number(p.cursor) === 37 && p.status === \"PAUSED\" &&\n Number(c.cursor) === 100 && c.status === \"COMPLETE\" && c.last_error === null &&\n Number(af.cursor) === 1 && Number(af.imported_count) === 1 && Number(af.indexed_messages) === 2 && af.status === \"IN_PROGRESS\" &&\n Number(ar.cursor) === 1 && Number(ar.imported_count) === 1 && Number(ar.indexed_messages) === 2 && ar.status === \"IN_PROGRESS\" &&\n Number(as.cursor) === 2 && Number(as.imported_count) === 2 && Number(as.indexed_messages) === 5 && as.status === \"IN_PROGRESS\" &&\n Number(ac.cursor) === 3 && Number(ac.imported_count) === 3 && Number(ac.indexed_messages) === 6 && ac.status === \"COMPLETE\" &&\n Number(acr.cursor) === 3 && Number(acr.imported_count) === 3 && Number(acr.indexed_messages) === 6 && acr.status === \"COMPLETE\" &&\n Number((atomicResidue.rows[0] as any)?.count ?? -1) === 0 &&\n Number((residue.rows[0] as any)?.count ?? -1) === 0;\n\nconst result = {\n pass,\n version: \"0.6.0\",\n activeProvider: storage.activeProvider,\n inventory: parsed.inventory,\n candidateIds: ids,\n deduplication: { keptDuplicateTitle, duplicateCandidateCount: parsed.inventory.duplicateCandidateCount },\n selectiveRead: { wholeFileArrayBufferAttempted, conversationMethods },\n negativeControls: { missingConversationJsonBlocked, crcMismatchBlocked },\n fingerprintStable: parsed.sourceFingerprint === parsedAgain.sourceFingerprint,\n fingerprintStableAcrossRenameAndMtime: parsed.sourceFingerprint === parsedRenamed.sourceFingerprint,\n runIdShapeValid: /^imp_[a-f0-9]{40}$/.test(parsed.runId),\n scopedRunIds: { one: scopedOne, three: scopedThree, distinct: scopedOne !== scopedThree },\n paused: { cursor: Number(p.cursor), imported: Number(p.imported_count), skipped: Number(p.skipped_count), status: p.status },\n complete: c,\n atomicReplay: {\n first: af,\n replay: ar,\n second: as,\n complete: ac,\n completeReplay: acr,\n residue: Number((atomicResidue.rows[0] as any)?.count ?? -1),\n },\n fixtureResidue: Number((residue.rows[0] as any)?.count ?? -1),\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[204],"82acb360-5195-4822-b505-561ba443893c","v06_release_audit.ts","01a07f42-c11a-7588-86ec-5fc2eccc0f9d",["D",1788841476385],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst importRuns = await db.execute(`SELECT\n COUNT(*) AS total,\n COALESCE(SUM(CASE WHEN id LIKE 'imp_v06_selftest%' OR id LIKE 'imp_v06_atomic%' THEN 1 ELSE 0 END),0) AS selftest_residue,\n COALESCE(SUM(CASE WHEN status='IN_PROGRESS' THEN 1 ELSE 0 END),0) AS in_progress,\n COALESCE(SUM(CASE WHEN status!='COMPLETE' THEN 1 ELSE 0 END),0) AS non_complete\n FROM vault_import_runs`);\nconst corpus = await db.execute(`SELECT\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints,\n (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts,\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations`);\nconst queue = await control.execute(`SELECT\n COALESCE(SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END),0) AS pending,\n COALESCE(SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END),0) AS running\n FROM vault_bridge_requests`);\n\nconst i: any = importRuns.rows[0] ?? {};\nconst c: any = corpus.rows[0] ?? {};\nconst q: any = queue.rows[0] ?? {};\nconst invariants = {\n messagesMatchFts: Number(c.messages ?? -1) === Number(c.message_fts ?? -2),\n checkpointsMatchFts: Number(c.checkpoints ?? -1) === Number(c.checkpoint_fts ?? -2),\n knowledgeMatchFts: Number(c.knowledge_items ?? -1) === Number(c.knowledge_fts ?? -2),\n minimumBaselinePreserved:\n Number(c.conversations ?? 0) >= 3 &&\n Number(c.messages ?? 0) >= 10 &&\n Number(c.knowledge_items ?? 0) >= 3 &&\n Number(c.relations ?? 0) >= 7,\n};\nconst pass = storage.activeProvider === \"turso\" &&\n Number(i.selftest_residue ?? -1) === 0 &&\n Number(i.in_progress ?? -1) === 0 &&\n Number(i.non_complete ?? -1) === 0 &&\n Number(q.pending ?? -1) === 0 &&\n Number(q.running ?? -1) === 0 &&\n Object.values(invariants).every(Boolean);\n\nconst result = {\n pass,\n version: \"0.6.2-audit-currentness\",\n activeProvider: storage.activeProvider,\n importRuns: {\n total: Number(i.total ?? 0),\n selftestResidue: Number(i.selftest_residue ?? 0),\n inProgress: Number(i.in_progress ?? 0),\n nonComplete: Number(i.non_complete ?? 0),\n },\n corpus: c,\n invariants,\n bridgeQueue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[210],"bce80d6a-9d75-4bb0-86ec-9314f08bca11","v05_selftest.ts","01a07f42-c11a-7588-86ec-594f109dff6e",["D",1788841476385],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst [counts, timeoutItem, invalidFixture, timeoutFts, crossChatFts, relations] = await Promise.all([\n db.execute(`SELECT\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations,\n (SELECT COUNT(*) FROM conversations) AS conversations,\n (SELECT COUNT(*) FROM vault_messages) AS messages,\n (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints`),\n db.execute({ sql: `SELECT id,project,kind,evidence_state FROM vault_knowledge_items WHERE id=?`, args: [\"kn_timeout_write_reconciliation\"] }),\n db.execute({ sql: `SELECT id FROM vault_knowledge_items WHERE id=?`, args: [\"kn_invalid_relation_fixture\"] }),\n db.execute({ sql: `SELECT knowledge_id FROM vault_knowledge_fts WHERE vault_knowledge_fts MATCH ?`, args: ['\"unknown_external_state\"*'] }),\n db.execute({ sql: `SELECT knowledge_id FROM vault_knowledge_fts WHERE vault_knowledge_fts MATCH ?`, args: ['\"cross\"* AND \"chat\"*'] }),\n db.execute({ sql: `SELECT relation,target_type,target_id FROM vault_relations WHERE source_type='knowledge' AND source_id=? ORDER BY relation`, args: [\"kn_timeout_write_reconciliation\"] }),\n]);\n\nconst evidence = await control.execute(`SELECT id,status,error,attempt_count,result_json FROM vault_bridge_requests\n WHERE id IN (\n 'v05_kn_timeout_reconciliation_01',\n 'v05_hybrid_conceptual_timeout_01',\n 'v05_hybrid_filtered_01',\n 'v05_invalid_relation_01',\n 'v05_get_knowledge_timeout_01',\n 'v05_related_timeout_01',\n 'v05_stats_after_retry_01'\n ) ORDER BY id`);\nconst queue = await control.execute(`SELECT\n SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END) AS pending,\n SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END) AS running\n FROM vault_bridge_requests`);\n\nconst map = new Map((evidence.rows as any[]).map((row) => [String(row.id), row]));\nconst filtered = JSON.parse(String(map.get(\"v05_hybrid_filtered_01\")?.result_json ?? \"{}\"));\nconst conceptual = JSON.parse(String(map.get(\"v05_hybrid_conceptual_timeout_01\")?.result_json ?? \"{}\"));\nconst c: any = counts.rows[0] ?? {};\nconst q: any = queue.rows[0] ?? {};\n\nconst filteredItems = filtered?.result?.items ?? [];\nconst conceptualItems = conceptual?.result?.items ?? [];\nconst invariants = {\n knowledgeFtsAligned: Number(c.knowledge_items) === Number(c.knowledge_fts),\n minimumKnowledgeBaseline: Number(c.knowledge_items) >= 3,\n minimumRelationBaseline: Number(c.relations) >= 7,\n corpusOnlyGrows: Number(c.conversations) >= 3 && Number(c.messages) >= 10 && Number(c.checkpoints) >= 5,\n};\nconst pass =\n storage.activeProvider === \"turso\" &&\n Object.values(invariants).every(Boolean) &&\n timeoutItem.rows.some((r: any) => r.id === \"kn_timeout_write_reconciliation\" && r.project === \"GUH_AGENT_OS\" && r.kind === \"reusable_rule\") &&\n invalidFixture.rows.length === 0 &&\n timeoutFts.rows.some((r: any) => r.knowledge_id === \"kn_timeout_write_reconciliation\") &&\n crossChatFts.rows.some((r: any) => r.knowledge_id === \"kn_cross_chat_external_memory\") &&\n relations.rows.length === 3 &&\n map.get(\"v05_kn_timeout_reconciliation_01\")?.status === \"PASS\" &&\n Number(map.get(\"v05_kn_timeout_reconciliation_01\")?.attempt_count) === 2 &&\n map.get(\"v05_invalid_relation_01\")?.status === \"FAIL\" &&\n map.get(\"v05_invalid_relation_01\")?.error === \"INVALID_RELATION_0\" &&\n map.get(\"v05_hybrid_conceptual_timeout_01\")?.status === \"PASS\" &&\n conceptualItems.some((item: any) => item.id === \"kn_timeout_write_reconciliation\") &&\n map.get(\"v05_hybrid_filtered_01\")?.status === \"PASS\" &&\n filteredItems.length === 1 &&\n filteredItems[0]?.type === \"knowledge\" &&\n filteredItems[0]?.id === \"kn_timeout_write_reconciliation\" &&\n map.get(\"v05_get_knowledge_timeout_01\")?.status === \"PASS\" &&\n map.get(\"v05_related_timeout_01\")?.status === \"PASS\" &&\n Number(q.pending ?? 0) === 0 && Number(q.running ?? 0) === 0;\n\nconst result = {\n pass,\n version: \"0.5.0\",\n activeProvider: storage.activeProvider,\n counts: c,\n invariants,\n timeoutRelations: relations.rows,\n retryAttemptCount: Number(map.get(\"v05_kn_timeout_reconciliation_01\")?.attempt_count ?? 0),\n invalidRelationState: { status: map.get(\"v05_invalid_relation_01\")?.status, error: map.get(\"v05_invalid_relation_01\")?.error },\n conceptualFound: conceptualItems.map((item: any) => ({ type: item.type, id: item.id, matchedQueries: item.matchedQueries })),\n filteredItems: filteredItems.map((item: any) => ({ type: item.type, id: item.id, project: item.project, kind: item.kind })),\n queue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[216],"6fdae99f-d653-4b8a-b3d5-30eb3f0f2f77","v05_schema_migrate.ts","01a07f42-c11a-7588-86ec-568b88811fce",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nawait db.batch([\n { sql: `CREATE TABLE IF NOT EXISTS vault_knowledge_items (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n kind TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n tags_json TEXT NOT NULL DEFAULT '[]',\n entities_json TEXT NOT NULL DEFAULT '[]',\n source_type TEXT,\n source_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'KNOWLEDGE',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_knowledge_project_kind ON vault_knowledge_items(project, kind, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_knowledge_source ON vault_knowledge_items(source_type, source_id)` },\n { sql: `CREATE VIRTUAL TABLE IF NOT EXISTS vault_knowledge_fts USING fts5(\n knowledge_id UNINDEXED,\n project,\n kind,\n title,\n body,\n tags,\n entities,\n tokenize='unicode61 remove_diacritics 2'\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS vault_relations (\n id TEXT PRIMARY KEY,\n source_type TEXT NOT NULL,\n source_id TEXT NOT NULL,\n relation TEXT NOT NULL,\n target_type TEXT NOT NULL,\n target_id TEXT NOT NULL,\n weight REAL NOT NULL DEFAULT 1.0,\n provenance TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n UNIQUE(source_type, source_id, relation, target_type, target_id)\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_relations_source ON vault_relations(source_type, source_id)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_vault_relations_target ON vault_relations(target_type, target_id)` },\n]);\n\nconst counts = await db.execute(`SELECT\n (SELECT COUNT(*) FROM vault_knowledge_items) AS knowledge_items,\n (SELECT COUNT(*) FROM vault_knowledge_fts) AS knowledge_fts,\n (SELECT COUNT(*) FROM vault_relations) AS relations`);\n\nconst result = {\n pass: storage.activeProvider === \"turso\",\n schemaVersion: \"0.5.0\",\n activeProvider: storage.activeProvider,\n counts: counts.rows[0],\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[222],"9e750acb-d6bc-4b5b-9363-68689241b440","v04_bridge_selftest.ts","01a07f42-c11a-7588-86ec-53c25af421fe",["D",1788841476385],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nconst reqs = await control.execute(`SELECT id,status,error,attempt_count FROM vault_bridge_requests\n WHERE id IN (\n 'bridge_e2e_search_kernel_20260906',\n 'bridge_e2e_get_kernel_20260906',\n 'bridge_e2e_stats_20260906',\n 'bridge_e2e_checkpoint_20260906',\n 'bridge_negative_disallowed_action_20260906_v2',\n 'bridge_stale_recoverable_20260906',\n 'bridge_stale_exhausted_20260906'\n ) ORDER BY id`);\n\nconst map = new Map((reqs.rows as any[]).map((r) => [String(r.id), r]));\nconst cp = await db.execute({ sql: `SELECT id,evidence_state FROM vault_checkpoints WHERE id=?`, args: ['cp_guh_v04_chatgpt_bridge'] });\nconst cpSearch = await db.execute({ sql: `SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ?`, args: ['\"chatgpt\"* AND \"bridge\"*'] });\nconst search = await db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"kernel\"* AND \"timeout\"*'] });\nconst queue = await control.execute(`SELECT\n SUM(CASE WHEN status='PENDING' THEN 1 ELSE 0 END) AS pending,\n SUM(CASE WHEN status='RUNNING' THEN 1 ELSE 0 END) AS running\n FROM vault_bridge_requests`);\n\nconst q: any = queue.rows[0] ?? {};\nconst pass =\n storage.activeProvider === 'turso' &&\n map.get('bridge_e2e_search_kernel_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_get_kernel_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_stats_20260906')?.status === 'PASS' &&\n map.get('bridge_e2e_checkpoint_20260906')?.status === 'PASS' &&\n map.get('bridge_negative_disallowed_action_20260906_v2')?.status === 'BLOCKED' &&\n map.get('bridge_negative_disallowed_action_20260906_v2')?.error === 'ACTION_NOT_ALLOWED' &&\n map.get('bridge_stale_recoverable_20260906')?.status === 'PASS' &&\n Number(map.get('bridge_stale_recoverable_20260906')?.attempt_count) === 2 &&\n map.get('bridge_stale_exhausted_20260906')?.status === 'FAIL' &&\n map.get('bridge_stale_exhausted_20260906')?.error === 'STALE_LEASE_RETRY_BUDGET_EXHAUSTED' &&\n cp.rows.some((r: any) => r.id === 'cp_guh_v04_chatgpt_bridge' && r.evidence_state === 'OPERATIONAL_SYNTHETIC_CHATGPT_BRIDGE') &&\n cpSearch.rows.some((r: any) => r.checkpoint_id === 'cp_guh_v04_chatgpt_bridge') &&\n search.rows.some((r: any) => r.conversation_id === 'demo_kernel_timeout') &&\n Number(q.pending ?? 0) === 0 && Number(q.running ?? 0) === 0;\n\nconst result = {\n pass,\n activeProvider: storage.activeProvider,\n evidenceRows: reqs.rows,\n checkpointFound: cp.rows.length === 1,\n checkpointSearchable: cpSearch.rows.some((r: any) => r.checkpoint_id === 'cp_guh_v04_chatgpt_bridge'),\n kernelTimeoutSearchable: search.rows.some((r: any) => r.conversation_id === 'demo_kernel_timeout'),\n queue: { pending: Number(q.pending ?? 0), running: Number(q.running ?? 0) },\n};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[228],"116126c2-5160-40e8-bf4d-c0350e88a77b","v03_turso_auth_negative_selftest.ts","01a07f42-c11a-7588-86ec-4d3a9dd2619f",["D",1788841476385],"import { createClient } from \"npm:@libsql/client@0.15.15/web\";\n\nconst url = Deno.env.get(\"TURSO_DATABASE_URL\");\nif (!url) throw new Error(\"TURSO_DATABASE_URL_MISSING\");\n\nconst invalid = createClient({ url, authToken: \"intentionally-invalid-token-for-negative-control\" });\nlet rejected = false;\nlet errorClass = \"\";\ntry {\n await invalid.execute(\"SELECT 1 AS ok\");\n} catch (error) {\n rejected = true;\n errorClass = error instanceof Error ? error.name : \"unknown\";\n}\n\nconst result = { pass: rejected, invalidCredentialRejected: rejected, errorClass };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[234],"869ffde6-dfc4-415a-a4aa-6ed0ff04bc1e","v03_storage_selftest.ts","01a07f42-c11a-7588-86ec-481bce5ca029",["D",1788841476385],"import { getLocalDatabase, getStorageState, probeTurso } from \"./lib/storage_provider.ts\";\n\nconst state = getStorageState();\nconst local = getLocalDatabase();\nconst localProbe = await local.execute(\"SELECT 1 AS ok\");\nconst localOk = Number((localProbe.rows[0] as any)?.ok ?? 0) === 1;\nconst turso = await probeTurso();\n\nconst result = {\n pass: localOk && state.credentialValuesExposed === false && (\n state.externalConfigured\n ? turso.configured === true\n : turso.configured === false && turso.authenticated === false && turso.reachable === false\n ),\n localOk,\n storageState: state,\n tursoProbe: turso,\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[240],"a1d92177-9de2-4191-ad95-ef05ea9d0f63","v03_migrate_to_turso.ts","01a07f42-c11a-7588-86ec-4757f17fddf4",["D",1788841476385],"import { getLocalDatabase, getTursoClient } from \"./lib/storage_provider.ts\";\n\nconst local = getLocalDatabase();\nconst turso = getTursoClient();\nif (!turso) throw new Error(\"TURSO_NOT_CONFIGURED\");\n\nasync function sha256(value: unknown) {\n const bytes = new TextEncoder().encode(JSON.stringify(value));\n const digest = await crypto.subtle.digest(\"SHA-256\", bytes);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function remote(sql: string, args: any[] = []) {\n return await turso!.execute({ sql, args });\n}\n\nasync function ensureRemoteSchema() {\n const statements = [\n `CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)`,\n `CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)`,\n `CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)`,\n `CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`,\n `CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)`,\n `CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`,\n `CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n ];\n for (const sql of statements) await remote(sql);\n await remote(\n `INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version','0.3.0',datetime('now'))\n ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at`,\n );\n}\n\nasync function fetchLocal() {\n const [conversations, messages, checkpoints] = await Promise.all([\n local.execute(`SELECT id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at\n FROM conversations ORDER BY id`),\n local.execute(`SELECT id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at\n FROM vault_messages ORDER BY conversation_id,seq,id`),\n local.execute(`SELECT id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at\n FROM vault_checkpoints ORDER BY id`),\n ]);\n return { conversations: conversations.rows as any[], messages: messages.rows as any[], checkpoints: checkpoints.rows as any[] };\n}\n\nasync function migrate(data: Awaited>) {\n for (const row of data.conversations) {\n await remote(\n `INSERT INTO conversations(id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,create_time=excluded.create_time,update_time=excluded.update_time,\n message_count=excluded.message_count,char_count=excluded.char_count,content_bytes=excluded.content_bytes,content_text=excluded.content_text,\n truncated=excluded.truncated,source_file=excluded.source_file,imported_at=excluded.imported_at`,\n [row.id,row.title,row.create_time,row.update_time,row.message_count,row.char_count,row.content_bytes,row.content_text,row.truncated,row.source_file,row.imported_at],\n );\n await remote(`DELETE FROM vault_messages_fts WHERE conversation_id = ?`, [row.id]);\n await remote(`DELETE FROM vault_messages WHERE conversation_id = ?`, [row.id]);\n }\n\n const titleByConversation = new Map(data.conversations.map((r) => [String(r.id), String(r.title)]));\n for (const row of data.messages) {\n await remote(\n `INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?)`,\n [row.id,row.conversation_id,row.seq,row.role,row.create_time,row.content_text,row.char_count,row.content_bytes,row.imported_at],\n );\n await remote(\n `INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)`,\n [row.id,row.conversation_id,titleByConversation.get(String(row.conversation_id)) ?? \"Sem título\",row.role,row.content_text],\n );\n }\n\n for (const row of data.checkpoints) {\n await remote(\n `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET project=excluded.project,title=excluded.title,summary=excluded.summary,decisions=excluded.decisions,\n open_gaps=excluded.open_gaps,next_action=excluded.next_action,source_conversation_id=excluded.source_conversation_id,\n evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n [row.id,row.project,row.title,row.summary,row.decisions,row.open_gaps,row.next_action,row.source_conversation_id,row.evidence_state,row.created_at,row.updated_at],\n );\n await remote(`DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?`, [row.id]);\n await remote(\n `INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)`,\n [row.id,row.project,row.title,row.summary,row.decisions,row.open_gaps,row.next_action],\n );\n }\n}\n\nasync function verify(source: Awaited>) {\n const rc = await remote(`SELECT id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at FROM conversations ORDER BY id`);\n const rm = await remote(`SELECT id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at FROM vault_messages ORDER BY conversation_id,seq,id`);\n const rp = await remote(`SELECT id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at FROM vault_checkpoints ORDER BY id`);\n const ftsMessageCount = await remote(`SELECT COUNT(*) AS c FROM vault_messages_fts`);\n const ftsCheckpointCount = await remote(`SELECT COUNT(*) AS c FROM vault_checkpoints_fts`);\n\n const sourceHashes = {\n conversations: await sha256(source.conversations),\n messages: await sha256(source.messages),\n checkpoints: await sha256(source.checkpoints),\n };\n const destinationHashes = {\n conversations: await sha256(rc.rows),\n messages: await sha256(rm.rows),\n checkpoints: await sha256(rp.rows),\n };\n\n const kernel = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"kernel\"* AND \"timeout\"*']);\n const nr12 = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"nr\"* AND \"12\"*']);\n const reconciliation = await remote(`SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? ORDER BY conversation_id`, ['\"reconciliacao\"*']);\n const checkpoint = await remote(`SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ? ORDER BY checkpoint_id`, ['\"export\"* AND \"oficial\"*']);\n const negative = await remote(`SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, ['\"guhtermoinexistente987654\"*']);\n\n const ftsCounts = {\n messages: Number((ftsMessageCount.rows[0] as any)?.c ?? -1),\n checkpoints: Number((ftsCheckpointCount.rows[0] as any)?.c ?? -1),\n };\n const counts = {\n source: { conversations: source.conversations.length, messages: source.messages.length, checkpoints: source.checkpoints.length },\n destination: { conversations: rc.rows.length, messages: rm.rows.length, checkpoints: rp.rows.length },\n fts: ftsCounts,\n };\n\n const pass =\n JSON.stringify(counts.source) === JSON.stringify(counts.destination) &&\n ftsCounts.messages === source.messages.length &&\n ftsCounts.checkpoints === source.checkpoints.length &&\n sourceHashes.conversations === destinationHashes.conversations &&\n sourceHashes.messages === destinationHashes.messages &&\n sourceHashes.checkpoints === destinationHashes.checkpoints &&\n kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\") &&\n nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\") &&\n reconciliation.rows.length >= 2 &&\n checkpoint.rows.length >= 1 &&\n Number((negative.rows[0] as any)?.c ?? -1) === 0;\n\n return {\n pass,\n counts,\n hashesEqual: {\n conversations: sourceHashes.conversations === destinationHashes.conversations,\n messages: sourceHashes.messages === destinationHashes.messages,\n checkpoints: sourceHashes.checkpoints === destinationHashes.checkpoints,\n },\n searchProofs: {\n kernelTimeout: kernel.rows,\n nr12: nr12.rows,\n reconciliation: reconciliation.rows,\n exportOfficialCheckpointCount: checkpoint.rows.length,\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n },\n };\n}\n\nawait ensureRemoteSchema();\nconst source = await fetchLocal();\nawait migrate(source);\nconst verification = await verify(source);\nconsole.log(JSON.stringify(verification));\nexport default verification;\n",[246],"232bffd5-41b4-4296-b210-8fee14f3ed70","v03_active_storage_selftest.ts","01a07f42-c11a-7588-86ec-4124442497e5",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst state = getStorageState();\nconst PROBE_KEY = \"v03_active_batch_probe\";\n\nawait db.execute(`CREATE TABLE IF NOT EXISTS vault_meta (key TEXT PRIMARY KEY, value TEXT NOT NULL, updated_at TEXT NOT NULL)`);\n\nlet batchOk = false;\ntry {\n const results: any = await db.batch([\n { sql: `INSERT INTO vault_meta(key,value,updated_at) VALUES(?,?,datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at`, args: [PROBE_KEY, \"batch-pass\"] },\n { sql: `SELECT value FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] },\n { sql: `DELETE FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] },\n ]);\n batchOk = String(results?.[1]?.rows?.[0]?.value ?? \"\") === \"batch-pass\";\n} finally {\n await db.execute({ sql: `DELETE FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] });\n}\n\nconst [counts, kernel, nr12, negative, probeResidue] = await Promise.all([\n db.execute(`SELECT (SELECT COUNT(*) FROM conversations) AS conversations, (SELECT COUNT(*) FROM vault_messages) AS messages, (SELECT COUNT(*) FROM vault_checkpoints) AS checkpoints, (SELECT COUNT(*) FROM vault_messages_fts) AS message_fts, (SELECT COUNT(*) FROM vault_checkpoints_fts) AS checkpoint_fts`),\n db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"kernel\"* AND \"timeout\"*'] }),\n db.execute({ sql: `SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"nr\"* AND \"12\"*'] }),\n db.execute({ sql: `SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?`, args: ['\"guhtermoinexistente987654\"*'] }),\n db.execute({ sql: `SELECT COUNT(*) AS c FROM vault_meta WHERE key = ?`, args: [PROBE_KEY] }),\n]);\n\nconst row: any = counts.rows[0] ?? {};\nconst result = {\n pass:\n state.activeProvider === \"turso\" &&\n batchOk &&\n Number(row.conversations) === 3 &&\n Number(row.messages) === 10 &&\n Number(row.checkpoints) >= 3 &&\n Number(row.message_fts) === 10 &&\n Number(row.checkpoint_fts) === Number(row.checkpoints) &&\n kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\") &&\n nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\") &&\n Number((negative.rows[0] as any)?.c ?? -1) === 0 &&\n Number((probeResidue.rows[0] as any)?.c ?? -1) === 0,\n activeProvider: state.activeProvider,\n batchOk,\n counts: {\n conversations: Number(row.conversations),\n messages: Number(row.messages),\n checkpoints: Number(row.checkpoints),\n messageFts: Number(row.message_fts),\n checkpointFts: Number(row.checkpoint_fts),\n },\n kernelTimeoutFound: kernel.rows.some((r: any) => r.conversation_id === \"demo_kernel_timeout\"),\n nr12Found: nr12.rows.some((r: any) => r.conversation_id === \"demo_nr12_visual\"),\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n probeResidue: Number((probeResidue.rows[0] as any)?.c ?? -1),\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[252],"5214768d-2cee-478c-b335-08b4968316bd","v031_storage_policy_selftest.ts","01a07f42-c11a-7588-86ec-3c760a5eb6f6",["D",1788841476385],"import { decideStorageState } from \"./lib/storage_provider.ts\";\n\nconst neither = decideStorageState(false, false);\nconst urlOnly = decideStorageState(true, false);\nconst tokenOnly = decideStorageState(false, true);\nconst both = decideStorageState(true, true);\n\nconst result = {\n pass:\n neither.activeProvider === \"blocked\" && neither.migrationMode === \"BLOCKED_EXTERNAL_REQUIRED\" && neither.localFallbackEnabled === false &&\n urlOnly.activeProvider === \"blocked\" && urlOnly.externalConfigured === false &&\n tokenOnly.activeProvider === \"blocked\" && tokenOnly.externalConfigured === false &&\n both.activeProvider === \"turso\" && both.externalConfigured === true && both.migrationMode === \"TURSO_ACTIVE\" && both.localFallbackEnabled === false,\n cases: {\n neither: { activeProvider: neither.activeProvider, migrationMode: neither.migrationMode },\n urlOnly: { activeProvider: urlOnly.activeProvider, migrationMode: urlOnly.migrationMode },\n tokenOnly: { activeProvider: tokenOnly.activeProvider, migrationMode: tokenOnly.migrationMode },\n both: { activeProvider: both.activeProvider, migrationMode: both.migrationMode },\n },\n localFallbackEnabled: both.localFallbackEnabled,\n};\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[258],"8742a0db-21ed-4bbe-ae87-5157ef9e86d0","v02_selftest.ts","01a07f42-c11a-7588-86ec-3b0bb67f3196",["D",1788841476385],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CID = \"v02_selftest_fixture\";\nconst CPID = \"v02_selftest_checkpoint\";\n\nasync function cleanup() {\n await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"DELETE FROM vault_checkpoints WHERE id = ?\", args: [CPID] },\n ]);\n}\n\nasync function writeFixture() {\n const now = new Date().toISOString();\n await sqlite.batch([\n { sql: `INSERT INTO conversations(id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title, message_count=excluded.message_count, content_text=excluded.content_text, imported_at=excluded.imported_at`,\n args: [CID, \"Fixture V0.2\", 1, 2, 2, 64, 64, \"[USER]\\nalpha kernel\\n\\n[ASSISTANT]\\nbeta timeout\", 0, \"selftest\", now] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m1`, CID, 0, \"user\", 1, \"alpha kernel\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m1`, CID, \"Fixture V0.2\", \"user\", \"alpha kernel\"] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m2`, CID, 1, \"assistant\", 2, \"beta timeout\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m2`, CID, \"Fixture V0.2\", \"assistant\", \"beta timeout\"] },\n { sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET summary=excluded.summary, updated_at=excluded.updated_at`,\n args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\", CID, \"SYNTHETIC\", now, now] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)\", args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\"] },\n ]);\n}\n\nlet result: Record = {};\ntry {\n await cleanup();\n await writeFixture();\n await writeFixture(); // idempotency/reindex replay\n\n const counts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages WHERE conversation_id = ?\", args: [CID] });\n const ftsCounts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] });\n const hit = await sqlite.execute({ sql: \"SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ? AND conversation_id = ?\", args: ['\"kernel\"*', CID] });\n const negative = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?\", args: ['\"notpresent987\"*'] });\n const cp = await sqlite.execute({ sql: \"SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ?\", args: ['\"gamma\"*'] });\n\n result = {\n pass: Number((counts.rows[0] as any)?.c) === 2\n && Number((ftsCounts.rows[0] as any)?.c) === 2\n && (hit.rows[0] as any)?.conversation_id === CID\n && Number((negative.rows[0] as any)?.c) === 0\n && (cp.rows[0] as any)?.checkpoint_id === CPID,\n messagesAfterReplay: Number((counts.rows[0] as any)?.c ?? -1),\n ftsRowsAfterReplay: Number((ftsCounts.rows[0] as any)?.c ?? -1),\n positiveSearch: hit.rows,\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n checkpointSearch: cp.rows,\n };\n} finally {\n await cleanup();\n}\n\nconsole.log(JSON.stringify(result));\nexport default result;\n",[264],"b78ec0e6-49ef-4839-a6be-93475724eac8","payana_seed_v1.ts","01a07f42-c11a-7588-86ec-3699c3aa4d73",["D",1788841476385],"import { getActiveDatabase } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst now = new Date().toISOString();\n\nawait db.batch([\n { sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"current_checkpoint\",JSON.stringify({id:\"cp_payana_20260907_1703_brt\",status:\"DURABLE_RECOVERY_PASS_WITH_OPEN_PROVENANCE_GAP\",doNotRestart:true}),\"VERIFIED_DURABLE_CHECKPOINT\",\"cp_payana_20260907_1703_brt\",now,now] },\n { sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"execution_plane\",JSON.stringify({candidate:\"chat-native-maestro\",softwareState:\"READY\",browserProviderState:\"NOT_OPERATIONAL\",kernelCredential:false,browserlessCredential:false,liveProviderAttempts:0}),\"VERIFIED_RUNTIME_2026_09_07\",\"Val Town runtime census 2026-09-07\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"termmax_immunefi\",\"TermMax / Immunefi bug bounty\",\"Immunefi\",\"https://immunefi.com/bug-bounty/termstructurelabs/information/\",\"ACTIVE\",\"500\",\"80000\",\"USD\",\"NO_KYC\",\"ZERO_CAPITAL_RESEARCH_PATH\",null,JSON.stringify([\"PoC required\",\"No mainnet/public-testnet testing\",\"No DoS\",\"No significant automated traffic\",\"Respect in-scope assets\"]),now,\"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\"Immunefi official program page\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"blockpi_immunefi\",\"BlockPI Network / Immunefi bug bounty\",\"Immunefi\",\"https://immunefi.com/bug-bounty/blockpinetwork/information/\",\"ACTIVE\",\"1000\",\"5000\",\"USD\",\"NO_KYC\",\"ZERO_CAPITAL_RESEARCH_PATH\",null,JSON.stringify([\"PoC with code/end-effect required\",\"No mainnet/public-testnet testing\",\"No DoS\",\"No significant automated traffic\",\"Respect in-scope assets\"]),now,\"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\"Immunefi official program page\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"binance_agent_os_2026\",\"Binance Agent OS Mini Hackathon\",\"Binance\",null,\"ACTIVE_DEADLINE_SOON\",\"300\",\"2000\",\"USD\",\"ACCOUNT_ELIGIBILITY_UNVERIFIED\",\"TRACK_A_ZERO_CAPITAL_COMPATIBLE\",\"2026-09-08T23:59:00Z\",JSON.stringify([\"Track A social/submission steps required\",\"Track B trading is not treated as zero-capital\",\"Country/account eligibility must be proven\"]),now,\"OFFICIAL_SOURCE_VERIFIED_ELIGIBILITY_PARTIAL\",\"Binance official announcement\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"opencv_ai_2026\",\"OpenCV AI Competition 2026 / AWS\",\"Devpost\",null,\"ACTIVE\",\"150\",\"5000\",\"USD\",\"RULES_DEPENDENT\",\"ZERO_CAPITAL_BUILD_PATH\",\"2026-10-27T06:45:00Z\",JSON.stringify([\"Submission and eligibility rules apply\",\"Total pool includes AWS compute grants\"]),now,\"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\"OpenCV Devpost official competition page\",now,now] },\n { sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"bountybook_current\",\"BountyBook current availability\",\"BountyBook\",\"https://www.bountybook.ai/\",\"NO_OPEN_BOUNTIES\",null,null,\"USDC\",null,\"ZERO_CAPITAL_MARKETPLACE_PATH\",null,JSON.stringify([\"Early beta\",\"0 open bounties at current checkpoint\"]),now,\"OFFICIAL_CURRENT_STATE_PLUS_RECOVERY_GAP\",\"BountyBook official homepage\",now,now] },\n { sql: `INSERT INTO payana_economic_events(id,opportunity_id,event_type,amount_decimal,currency,platform,occurred_at,external_ref,evidence_state,evidence_refs_json,notes,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET opportunity_id=excluded.opportunity_id,event_type=excluded.event_type,amount_decimal=excluded.amount_decimal,currency=excluded.currency,platform=excluded.platform,occurred_at=excluded.occurred_at,external_ref=excluded.external_ref,evidence_state=excluded.evidence_state,evidence_refs_json=excluded.evidence_refs_json,notes=excluded.notes,updated_at=excluded.updated_at`,\n args:[\"REV-000001\",null,\"REVENUE\",\"0.01\",\"USD\",null,null,null,\"USER_CONFIRMED_RECEIPT_UNVERIFIED\",JSON.stringify([\"cp_payana_20260907_1641_brt\",\"payana_revenue_rev_000001\"]),\"First real non-zero revenue confirmed by user. Platform/task/transaction/timestamp remain unrecovered.\",now,now] },\n { sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET subject_type=excluded.subject_type,subject_id=excluded.subject_id,receipt_type=excluded.receipt_type,locator=excluded.locator,sha256=excluded.sha256,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args:[\"receipt-gap-REV-000001\",\"economic_event\",\"REV-000001\",\"PROVENANCE_GAP\",null,null,JSON.stringify({missing:[\"platform\",\"opportunity_or_task\",\"transaction_id\",\"timestamp\",\"balance_or_payout_evidence\"]}),\"MISSING_EVIDENCE\",null,now,now] },\n]);\n\nconst counts = await db.execute(`SELECT\n (SELECT COUNT(*) FROM payana_state) AS state_items,\n (SELECT COUNT(*) FROM payana_opportunities) AS opportunities,\n (SELECT COUNT(*) FROM payana_economic_events) AS economic_events,\n (SELECT COUNT(*) FROM payana_receipts) AS receipts`);\nconst rev = await db.execute({sql:`SELECT id,amount_decimal,currency,evidence_state FROM payana_economic_events WHERE id=?`,args:[\"REV-000001\"]});\nconst gap = await db.execute({sql:`SELECT id,verification_state FROM payana_receipts WHERE id=?`,args:[\"receipt-gap-REV-000001\"]});\nconst pass = rev.rows.length === 1 && String((rev.rows[0] as any).amount_decimal) === \"0.01\" && String((gap.rows[0] as any)?.verification_state) === \"MISSING_EVIDENCE\";\nconst result = {pass,schemaVersion:\"payana-ledger-1.0.0\",counts:counts.rows[0],rev000001:rev.rows[0],provenanceGap:gap.rows[0]};\nconsole.log(JSON.stringify(result));\nexport default result;\n",[270],"6372d735-9e58-4d4e-b971-b47cd16ae026",["D",1788842464851],[27],"a622f31d-bae8-40b1-a04f-1cc6969a0c66","payana_schema_migrate.ts","01a07f42-c11a-7588-86ec-313b75aa8604",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\n\nawait db.batch([\n { sql: `CREATE TABLE IF NOT EXISTS payana_state (\n key TEXT PRIMARY KEY,\n value_json TEXT NOT NULL,\n evidence_state TEXT NOT NULL,\n source_ref TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_opportunities (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n platform TEXT,\n url TEXT,\n status TEXT NOT NULL,\n reward_min_decimal TEXT,\n reward_max_decimal TEXT,\n currency TEXT,\n kyc_state TEXT,\n capital_state TEXT,\n deadline_at TEXT,\n constraints_json TEXT NOT NULL DEFAULT '[]',\n currentness_at TEXT,\n evidence_state TEXT NOT NULL,\n source_ref TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_opportunities_status ON payana_opportunities(status, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_opportunities_platform ON payana_opportunities(platform, updated_at)` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_economic_events (\n id TEXT PRIMARY KEY,\n opportunity_id TEXT,\n event_type TEXT NOT NULL,\n amount_decimal TEXT NOT NULL,\n currency TEXT NOT NULL,\n platform TEXT,\n occurred_at TEXT,\n external_ref TEXT,\n evidence_state TEXT NOT NULL,\n evidence_refs_json TEXT NOT NULL DEFAULT '[]',\n notes TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_economic_events_opportunity ON payana_economic_events(opportunity_id, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_economic_events_type ON payana_economic_events(event_type, updated_at)` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_actions (\n id TEXT PRIMARY KEY,\n opportunity_id TEXT,\n action_type TEXT NOT NULL,\n status TEXT NOT NULL,\n risk_class TEXT NOT NULL,\n approval_state TEXT NOT NULL,\n reversible INTEGER NOT NULL CHECK(reversible IN (0,1)),\n input_summary TEXT,\n output_summary TEXT,\n receipt_id TEXT,\n started_at TEXT,\n finished_at TEXT,\n evidence_state TEXT NOT NULL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_actions_opportunity ON payana_actions(opportunity_id, updated_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_actions_status ON payana_actions(status, updated_at)` },\n { sql: `CREATE TABLE IF NOT EXISTS payana_receipts (\n id TEXT PRIMARY KEY,\n subject_type TEXT NOT NULL,\n subject_id TEXT NOT NULL,\n receipt_type TEXT NOT NULL,\n locator TEXT,\n sha256 TEXT,\n payload_json TEXT NOT NULL DEFAULT '{}',\n verification_state TEXT NOT NULL,\n verified_at TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_payana_receipts_subject ON payana_receipts(subject_type, subject_id, updated_at)` },\n]);\n\nconst tables = await db.execute(`SELECT name FROM sqlite_master WHERE type='table' AND name LIKE 'payana_%' ORDER BY name`);\nconst expected = new Set([\"payana_actions\",\"payana_economic_events\",\"payana_opportunities\",\"payana_receipts\",\"payana_state\"]);\nconst found = new Set((tables.rows as any[]).map((r) => String(r.name)));\nconst pass = storage.activeProvider === \"turso\" && [...expected].every((name) => found.has(name));\nconst result = { pass, schemaVersion: \"payana-ledger-1.0.0\", activeProvider: storage.activeProvider, tables: [...found] };\nconsole.log(JSON.stringify(result));\nexport default result;\n",[279],"bc014a45-0da7-429e-9985-a57455e52c92","payana_resolution_checkpoint_20260907.ts","01a07f42-c11a-7588-86ec-2c38e462304b",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_resolution_20260907_2134_brt\";\n\nconst binance = {\n productionVal: \"cleitoncosta/payana-binance-agent-os\",\n demoUrl: \"https://payana-agent-os.val.run/\",\n sourceUrl: \"https://www.val.town/x/cleitoncosta/payana-binance-agent-os/code/\",\n submissionEvidenceUrl: \"https://payana-agent-os.val.run/api/submission-evidence\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n productionMainVersion: 52,\n finalAudit: { pass: true, assertions: 189, mutationSteps: 35, total: 224, auditedAt: \"2026-09-08T00:32:35.499Z\" },\n manifestSha256: \"42d156f13023108dd4a2fc0b9c8387a9f5a6bd24329cab5e70ef9e0e18dc273c\",\n liveApi: { health: \"PASS\", submissionEvidence: \"PASS\", btcAnalysis: \"PASS\", oauthStatus: \"READY_FOR_USER_AUTHORIZATION\" },\n chatgptBinanceWitness: {\n state: \"BINANCE_CHATGPT_PUBLIC_MARKET_DATA_PASS\",\n symbol: \"BTCUSDT\",\n observedSpotPrice: \"79066.00000000\",\n observed24hLastPrice: \"79065.99000000\",\n observed24hChangePercent: \"-1.425\",\n securityType: \"NONE_PUBLIC_MARKET_DATA\",\n classification: \"SEPARATE_PUBLIC_MARKET_DATA_INTEGRATION_NOT_AGENT_OS_MCP_AUTH_PROOF\"\n },\n remainingExternalGates: [\n \"PARTICIPANT_ACCOUNT_ELIGIBILITY\",\n \"SUPPORTED_CLIENT_AGENT_OS_MCP_MARKET_DATA_WITNESS\",\n \"X_FOLLOW_AND_REPOST\",\n \"X_TRACK_A_SUBMISSION\",\n \"BINANCE_SURVEY_COMPLETION\"\n ],\n deadlineUtc: \"2026-09-08T23:59:00Z\",\n deadlineBrt: \"2026-09-08T20:59:00-03:00\"\n};\n\nconst termmax = {\n candidate: \"H-Router-01\",\n program: \"TermMax / Immunefi\",\n decision: \"CLOSED_DUPLICATE_SURFACE_MATCH_STRONG\",\n economicDisposition: \"DO_NOT_SPEND_MORE_POC_EFFORT_ON_THIS_ROUTER_SURFACE_WITHOUT_MATERIAL_MECHANISM_DIFFERENCE\",\n exactPrivatePoCDiffState: \"UNAVAILABLE_IN_CURRENT_GITHUB_INSTALLATION\",\n publicEvidence: {\n upstreamFunction: \"TermMaxRouterV2._executeSwapUnits\",\n duplicateReport: \"#71992\",\n thirdPartyReproductionState: \"PUBLIC_REPO_STATES_FORGE_POC_PASSED_AND_IMMUNEFI_MARKED_DUPLICATE_$0\",\n issue: \"https://github.com/Replikanti/agentis-colonies/issues/2007\",\n commit: \"https://github.com/Replikanti/agentis-colonies/commit/2798dde61929aea22af345434af513a6be0adfc5\"\n },\n invariant: \"PROGRAM_ACTIVE != THIS_CANDIDATE_PAYABLE\"\n};\n\nconst checkpoint = {\n id: checkpointId,\n status: \"TECHNICAL_PACKAGE_GREEN_TERMMax_DUPLICATE_LANE_CLOSED_EXTERNAL_ACCOUNT_GATES_REMAIN\",\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n binanceRelease: binance.release,\n binanceProductionAudit: \"224_PASS_FRESH\",\n binanceManifestSha256: binance.manifestSha256,\n termmaxHRouter01: termmax.decision,\n nextAction: \"Prioritize Binance Track A external account gates before deadline. Do not pursue TermMax H-Router-01 unless a materially different mechanism is proven. Continue zero-capital opportunities after submission.\"\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_track_a_final_live_state\", JSON.stringify(binance), \"VERIFIED_RUNTIME_PLUS_CONNECTED_BINANCE_PUBLIC_DATA\", binance.submissionEvidenceUrl, now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"termmax_h_router_01\", JSON.stringify(termmax), \"PUBLIC_DUPLICATE_EVIDENCE_STRONG_PRIVATE_DIFF_UNAVAILABLE\", termmax.publicEvidence.issue, now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(checkpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n {\n sql: `UPDATE payana_opportunities SET status=?, constraints_json=?, currentness_at=?, evidence_state=?, source_ref=?, updated_at=? WHERE id=?`,\n args: [\n \"ACTIVE_TECHNICAL_PACKAGE_GREEN_EXTERNAL_ACCOUNT_GATES_ONLY\",\n JSON.stringify([\n \"Deadline 2026-09-08T23:59:00Z\",\n \"Live demo and public Val Town source available\",\n \"224-check release audit PASS at 2026-09-08T00:32:35.499Z\",\n \"Connected Binance ChatGPT public market-data witness PASS but not Agent OS MCP auth proof\",\n \"Participant/account eligibility unverified\",\n \"Supported-client Agent OS MCP Market Data witness remains open\",\n \"Follow/repost, Track A X submission and survey remain external account gates\",\n \"No Trade/Account/Transfer required for PayAna Track A workflow\"\n ]),\n now,\n \"OFFICIAL_RULES_PLUS_FRESH_PRODUCTION_RUNTIME\",\n \"https://www.binance.com/en/blog/community/8802181509900814931\",\n now,\n \"binance_agent_os_2026\"\n ]\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\n \"action-termmax-h-router-01-close-duplicate\",\n \"termmax_immunefi\",\n \"CANDIDATE_TRIAGE_CLOSE\",\n \"COMPLETED\",\n \"LOW\",\n \"USER_CONTINUE_RESOLVE_ALL\",\n 1,\n \"Resolve H-Router-01 without unsafe live-chain testing\",\n \"Closed candidate lane due strong public duplicate evidence for TermMaxRouterV2._executeSwapUnits; exact inaccessible private PoC diff not claimed recovered.\",\n \"receipt-termmax-h-router-01-duplicate\",\n now,\n now,\n \"PUBLIC_DUPLICATE_EVIDENCE_STRONG\",\n now,\n now\n ]\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,sha256=excluded.sha256,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-submission-manifest\",\n \"opportunity\",\n \"binance_agent_os_2026\",\n \"MACHINE_READABLE_SUBMISSION_MANIFEST\",\n binance.submissionEvidenceUrl,\n binance.manifestSha256,\n JSON.stringify({ finalAudit: binance.finalAudit, sourceUrl: binance.sourceUrl, chatgptBinanceWitness: binance.chatgptBinanceWitness, remainingExternalGates: binance.remainingExternalGates }),\n \"VERIFIED_RUNTIME\",\n now,\n now,\n now\n ]\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-termmax-h-router-01-duplicate\",\n \"action\",\n \"action-termmax-h-router-01-close-duplicate\",\n \"DUPLICATE_TRIAGE_RECEIPT\",\n termmax.publicEvidence.issue,\n null,\n JSON.stringify(termmax),\n \"VERIFIED_PUBLIC_DUPLICATE_EVIDENCE_STRONG\",\n now,\n now,\n now\n ]\n }\n]);\n\nconst stateRows = await db.execute({\n sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?,?) ORDER BY key\",\n args: [\"binance_track_a_final_live_state\", \"termmax_h_router_01\", \"current_checkpoint\"]\n});\nconst actions = await db.execute({\n sql: \"SELECT id,status,evidence_state,receipt_id FROM payana_actions WHERE id=?\",\n args: [\"action-termmax-h-router-01-close-duplicate\"]\n});\nconst receipts = await db.execute({\n sql: \"SELECT id,verification_state,locator,sha256 FROM payana_receipts WHERE id IN (?,?) ORDER BY id\",\n args: [\"receipt-binance-submission-manifest\", \"receipt-termmax-h-router-01-duplicate\"]\n});\nconst opp = await db.execute({\n sql: \"SELECT id,status,evidence_state,deadline_at FROM payana_opportunities WHERE id=?\",\n args: [\"binance_agent_os_2026\"]\n});\n\nconst pass = storage.activeProvider === \"turso\" && stateRows.rows.length === 3 && actions.rows.length === 1 && receipts.rows.length === 2 && opp.rows.length === 1;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: stateRows.rows, action: actions.rows[0], receipts: receipts.rows, opportunity: opp.rows[0] };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_RESOLUTION_CHECKPOINT_FAILED\");\nexport default result;\n",[285],"a25b397a-043c-44f6-9c23-b1c679430b17","payana_opportunity_watch_v4_cron.ts","732af666-ab3e-11f1-bb27-1607ee4eb77e",15,["D",1788842013353],"interval","import watch from \"./payana_opportunity_watch_v4.ts\";\nexport default async function (_interval:{lastRunAt?:Date}) {\n console.log(JSON.stringify({scheduler:\"payana_opportunity_watch_v4\",status:watch?.status??\"UNKNOWN\",stage:watch?.stage??\"UNKNOWN\",materialChanged:watch?.materialChanged??null,digest:watch?.digest??null}));\n return watch;\n}\n",[291],"bf72cc6b-9241-4f39-bb81-f12fd1494974","payana_opportunity_watch_v4.ts","d2f72624-ab3d-11f1-a67a-1607ee4eb77e",14,["D",1788841977733],2,"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst checkedAt = new Date().toISOString();\n\nconst sources = [\n {id:\"open_agent_hackathon_2026\", url:\"https://hackathon.genai.works/event/open-agent-hackathon-2026\", markers:[\"Open Agent Hackathon 2026\",\"Open worldwide\",\"Oct 9, 2026\",\"free\"]},\n {id:\"hackerrank_orchestrate_sep26\", url:\"https://www.hackerrank.com/hackerrank-orchestrate-september26\", markers:[\"Orchestrate\",\"Sep 12\",\"1,200\"]},\n {id:\"ibm_bob_2_2026\", url:\"https://lablab.ai/ai-hackathons/ibm-bob-2-hackathon\", markers:[\"IBM Bob 2.0\",\"10,000\",\"September 25\"]},\n {id:\"lablab_payout_terms\", url:\"https://lablab.ai/terms-of-use\", markers:[\"W-8BEN\",\"SWIFT\",\"30%\",\"government-issued photo ID\"]},\n {id:\"devpost_standard_exceptions\", url:\"https://help.devpost.com/article/144-what-are-the-standard-exceptions-for-global-eligibility\", markers:[\"Brazil\",\"Quebec\"]},\n];\n\nasync function get(s:{id:string,url:string,markers:string[]}) {\n const started = Date.now();\n const ctrl = new AbortController();\n const timer = setTimeout(()=>ctrl.abort(), 12000);\n try {\n const r = await fetch(s.url,{headers:{\"user-agent\":\"PayAna-ReadOnly-Opportunity-Watch/4.0\"},signal:ctrl.signal,redirect:\"follow\"});\n const text = (await r.text()).slice(0,600000);\n return {id:s.id,url:s.url,httpStatus:r.status,ok:r.ok,bytes:text.length,markers:Object.fromEntries(s.markers.map(m=>[m,text.toLowerCase().includes(m.toLowerCase())])),durationMs:Date.now()-started,error:null};\n } catch(e) {\n return {id:s.id,url:s.url,httpStatus:null,ok:false,bytes:0,markers:Object.fromEntries(s.markers.map(m=>[m,false])),durationMs:Date.now()-started,error:e instanceof Error?e.message:String(e)};\n } finally { clearTimeout(timer); }\n}\n\nconst results = await Promise.all(sources.map(get));\nconst stage = (()=>{\n const now = Date.now();\n const regClose=Date.parse(\"2026-10-05T00:00:00Z\"), buildOpen=Date.parse(\"2026-10-07T09:00:00Z\"), submitClose=Date.parse(\"2026-10-09T23:45:00Z\");\n if(now({id:r.id,httpStatus:r.httpStatus,ok:r.ok,markers:r.markers,error:r.error?\"FETCH_ERROR\":null}))});\nconst digest=Array.from(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(canonical)))).map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nconst previous=await db.execute({sql:\"SELECT value_json FROM payana_state WHERE key=?\",args:[\"opportunity_watch_v4\"]});\nlet previousDigest:string|null=null;\nif(previous.rows.length){try{previousDigest=JSON.parse(String((previous.rows[0] as any).value_json)).materialDigest??null}catch{}}\n(snapshot as any).materialDigest=digest;\nawait db.execute({sql:`INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?) ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,args:[\"opportunity_watch_v4\",JSON.stringify(snapshot),\"READ_ONLY_RUNTIME_WATCH\",\"payana_opportunity_watch_v4\",checkedAt,checkedAt]});\nif(previousDigest!==digest){\n const id=`action-opportunity-watch-v4-${digest.slice(0,16)}`;\n await db.execute({sql:`INSERT OR IGNORE INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[id,null,\"MONITOR_CHANGE\",\"COMPLETED\",\"LOW\",\"USER_CONTINUE_LOOP\",1,\"Read-only currentness check of prioritized opportunity surfaces\",JSON.stringify({stage,results:results.map(r=>({id:r.id,status:r.httpStatus,ok:r.ok,markers:r.markers,error:r.error}))}),null,checkedAt,checkedAt,\"RUNTIME_HTTP_EVIDENCE\",checkedAt,checkedAt]});\n}\nconst pass=storage.activeProvider===\"turso\"&&results.length===sources.length;\nconst output={pass,status:\"WATCH_COMPLETED\",stage,materialChanged:previousDigest!==digest,digest,results};\nconsole.log(JSON.stringify(output));\nif(!pass)throw new Error(\"PAYANA_OPPORTUNITY_WATCH_V4_STORAGE_FAILED\");\nexport default output;",[299],"cfb27a34-ff6d-4ac4-b6b3-adfc116f89b0","payana_opportunity_census_v3.ts","01a07f42-c11a-7588-86ec-2930031abadf",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\nconst db=getActiveDatabase(); const storage=getStorageState(); const now=new Date().toISOString();\nconst checkpointId=\"cp_payana_opportunity_census_v3_20260907_2252_brt\";\nconst rows=[\n {id:\"arc_agi_2_2026\",title:\"ARC Prize 2026 - ARC-AGI-2\",platform:\"Kaggle\",url:\"https://www.kaggle.com/competitions/arc-prize-2026-arc-agi-2\",status:\"ACTIVE_MEDIUM_HORIZON_ZERO_PURCHASE_HIGH_COMPLEXITY\",min:\"15000\",max:\"150000\",cur:\"USD\",kyc:\"WINNER_ELIGIBILITY_TAX_DOCS\",capital:\"NO_PURCHASE_REQUIRED_KAGGLE_COMPUTE_AVAILABLE\",deadline:\"2026-11-02T23:59:00Z\",score:91,evidence:\"OFFICIAL_KAGGLE_RULES_VERIFIED_2026_09_07\",source:\"Kaggle ARC-AGI-2 official rules\",constraints:[\"Entry deadline 2026-10-26 23:59 UTC; final 2026-11-02 23:59 UTC\",\"USD 700,000 total: progress 275k + innovation 275k + bonus 150k\",\"Winning/prize-eligible solutions must be open sourced\",\"Code submission through Kaggle Notebooks, internet disabled during submission runtime\",\"No purchase required under competition rules\",\"High technical difficulty and strong incumbents; treat as research portfolio, not quick cash\"]},\n {id:\"arc_agi_3_2026\",title:\"ARC Prize 2026 - ARC-AGI-3\",platform:\"Kaggle\",url:\"https://www.kaggle.com/competitions/arc-prize-2026-arc-agi-3\",status:\"ACTIVE_MEDIUM_HORIZON_ZERO_PURCHASE_HIGH_COMPLEXITY\",min:\"5000\",max:\"700000\",cur:\"USD\",kyc:\"WINNER_ELIGIBILITY_TAX_DOCS\",capital:\"NO_PURCHASE_REQUIRED_KAGGLE_COMPUTE_AVAILABLE\",deadline:\"2026-11-02T23:59:00Z\",score:87,evidence:\"OFFICIAL_KAGGLE_OVERVIEW_VERIFIED_2026_09_07\",source:\"Kaggle ARC-AGI-3 official overview\",constraints:[\"Entry deadline 2026-10-26; final 2026-11-02\",\"USD 850,000 total: 150k progress + conditional 700k bonus\",\"Milestone 2 deadline 2026-09-30 with 25k/7.5k/5k awards\",\"Prize-eligible solutions must be open sourced\",\"Notebook runtime <=9h and internet disabled\",\"Bonus requires 100% leaderboard condition; do not count conditional 700k as expected cash\"]},\n {id:\"arc_paper_2026\",title:\"ARC Prize 2026 - Paper Track\",platform:\"Kaggle\",url:\"https://www.kaggle.com/competitions/arc-prize-2026-paper-track\",status:\"ACTIVE_CONDITIONAL_ON_ARC2_OR_ARC3_SUBMISSION_LOW_PARTICIPANT_COUNT\",min:\"5000\",max:\"375000\",cur:\"USD\",kyc:\"WINNER_ELIGIBILITY_TAX_DOCS\",capital:\"ZERO_PURCHASE_RESEARCH_WRITEUP\",deadline:\"2026-11-09T23:59:00Z\",score:92,evidence:\"OFFICIAL_KAGGLE_PAPER_TRACK_VERIFIED_2026_09_07\",source:\"Kaggle ARC Paper Track official pages\",constraints:[\"Designed for ARC-AGI-2/3 participants; requires an ARC prediction-track approach\",\"Final 2026-11-09 23:59 UTC\",\"Public Kaggle Writeup + media + attached public notebook required\",\"USD 450,000 headline includes conditional/quality-based pools; headline prize is not guaranteed cash\",\"Current participant/team count is much lower than prediction tracks\",\"Strong synergy if an ARC2/3 solution is built; not standalone until dependency satisfied\"]},\n {id:\"buildarena_s01_2026\",title:\"BuildArena Human-AI Engineering Challenge S01\",platform:\"Kaggle\",url:\"https://www.kaggle.com/competitions/build-arena-human-ai-colleberation-engineering-challenge\",status:\"ACTIVE_SHORT_HORIZON_CAPITAL_REQUIREMENT_UNRESOLVED\",min:\"200\",max:\"700\",cur:\"USD\",kyc:\"UNVERIFIED_WINNER_DOCS\",capital:\"BASE_GAME_GIFTED_DLC_REQUIREMENT_UNRESOLVED\",deadline:\"2026-09-13T11:59:00Z\",score:78,evidence:\"OFFICIAL_KAGGLE_RULES_PLUS_UI_PRIZE_CONFLICT\",source:\"BuildArena Kaggle rules/overview\",constraints:[\"Submission deadline 2026-09-12 AOE\",\"Rules/updated notice say USD 3,000 pool while Kaggle metadata still shows USD 1,000; use rules as current but preserve conflict\",\"Besiege base game gifted by organizer via activation-key form\",\"The Broken Beyond DLC required; zero-capital eligibility remains unproven until DLC acquisition cost is resolved\",\"Build with Agent requires official BuildArena 2.0 MCP; machine structure through MCP\",\"Autopilot coefficient 1.15; Copilot 1.00; human manually pilots final run\",\"Very low current participation compared with major competitions\",\"Do not spend money on game/DLC under R$0 mission\"]},\n {id:\"soil_grain_kaggle_2026\",title:\"Predicting Soil Grain Size Distributions from Images\",platform:\"Kaggle\",url:\"https://www.kaggle.com/competitions/soil-grain-size-from-photos\",status:\"ACTIVE_LOW_PRIZE_TRACTABLE_CV_ENGINEERING\",min:\"50\",max:\"300\",cur:\"USD\",kyc:\"UNVERIFIED_COMMUNITY_PAYOUT_DOCS\",capital:\"ZERO_PURCHASE_KAGGLE_PATH\",deadline:null,score:63,evidence:\"OFFICIAL_DIRECT_COMPETITION_PAGE_VERIFIED_2026_09_07\",source:\"Kaggle direct competition page\",constraints:[\"Direct competition page says USD 500 total: 300/150/50\",\"Community competition, not Featured; host/payout confidence lower than major Kaggle competitions\",\"24 labeled training soil samples with multiple photos; small-data regime\",\"Evaluation is log-weighted Wasserstein/EMD and predictions must be monotone cumulative distributions\",\"Could be attacked with CV embeddings + physically constrained monotonic regression/ensembles\",\"Direct competition page overrides stale/aggregate prize displays\"]},\n {id:\"pokemon_strategy_2026\",title:\"Pokemon TCG AI Battle Challenge Strategy\",platform:\"Kaggle\",url:\"https://www.kaggle.com/competitions/ptcg-ai-battle-strategy\",status:\"NOT_EXECUTABLE_NEW_ENTRY_UNLESS_ALREADY_JOINED_REQUIRED_SIMULATION\",min:\"30000\",max:\"30000\",cur:\"USD\",kyc:\"WINNER_ELIGIBILITY_DOCS\",capital:\"ZERO_PURCHASE_COMPUTE_PATH\",deadline:\"2026-09-13T23:59:00Z\",score:0,evidence:\"OFFICIAL_TIMELINE_ENTRY_DEPENDENCY\",source:\"Kaggle Pokemon Strategy official rules\",constraints:[\"Strategy participation requires participation in companion Simulation competition with same team\",\"Strategy entry/team-merger deadline was 2026-09-06 and has passed\",\"Do not treat as a new-entry opportunity without evidence user already entered required competition\",\"Final deadline alone does not reopen entry\"]}\n];\nfor(const c of rows){await db.execute({sql:`INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,args:[c.id,c.title,c.platform,c.url,c.status,c.min,c.max,c.cur,c.kyc,c.capital,c.deadline,JSON.stringify({score:c.score,constraints:c.constraints}),now,c.evidence,c.source,now,now]});}\nconst integrity={version:\"opportunity-integrity-3.0.0\",invariants:[\"ENTRY_DEADLINE_PASSED != EXECUTABLE_NEW_ENTRY\",\"REQUIRES_PAID_DLC != ZERO_CAPITAL\",\"DIRECT_COMPETITION_PAGE > AGGREGATOR_PRIZE\",\"HEADLINE_PRIZE != EXPECTED_VALUE\",\"CONDITIONAL_BONUS != GUARANTEED_PRIZE\",\"PAPER_TRACK_DEPENDENCY != STANDALONE_ENTRY\"],newPriority:[\"arc_paper_2026 CONDITIONAL_ON_ARC2_OR_3\",\"arc_agi_2_2026\",\"arc_agi_3_2026\",\"buildarena_s01_2026 ONLY_IF_DLC_ZERO_COST\",\"soil_grain_kaggle_2026\"],note:\"Security lanes Origin/Obyte remain primary near-term passive hunt; ARC is medium-horizon high-upside diversification.\"};\nawait db.batch([\n {sql:`INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?) ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,args:[\"opportunity_integrity_census_v3\",JSON.stringify(integrity),\"OFFICIAL_KAGGLE_CURRENTNESS_CENSUS\",checkpointId,now,now]},\n {sql:`INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,args:[\"action-opportunity-census-v3\",null,\"OPPORTUNITY_CENSUS\",\"COMPLETED\",\"LOW\",\"USER_CONTINUE_OTHER_POSSIBILITIES\",1,\"Expand beyond security bounties into current Kaggle/engineering/reasoning competitions\",\"Added ARC2/ARC3/Paper, BuildArena, Soil; rejected Pokemon as new-entry lane because required entry deadline passed\",null,now,now,\"OFFICIAL_CURRENT_SOURCES\",now,now]},\n {sql:`INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?) ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,args:[\"current_checkpoint\",JSON.stringify({id:checkpointId,status:\"DIVERSIFIED_ZERO_CAPITAL_PIPELINE_V3\",doNotRestart:true,securityPrimary:\"originprotocol_immunefi\",securitySecondary:\"obyte_immunefi\",mediumHorizon:\"arc_agi_2_2026\",conditionalPaper:\"arc_paper_2026\",buildarena:\"ZERO_CAPITAL_UNRESOLVED_DLC\",rev000001:\"USER_CONFIRMED_RECEIPT_UNVERIFIED\"}),\"VERIFIED_DURABLE_CHECKPOINT\",checkpointId,now,now]}\n]);\nconst check=await db.execute({sql:\"SELECT id,status,evidence_state FROM payana_opportunities WHERE id IN (?,?,?,?,?,?) ORDER BY id\",args:rows.map(x=>x.id)}); const st=await db.execute({sql:\"SELECT key FROM payana_state WHERE key IN (?,?)\",args:[\"opportunity_integrity_census_v3\",\"current_checkpoint\"]});\nconst pass=storage.activeProvider===\"turso\"&&check.rows.length===6&&st.rows.length===2; const result={pass,provider:storage.activeProvider,checkpointId,rows:check.rows}; console.log(JSON.stringify(result)); if(!pass)throw new Error(\"PAYANA_CENSUS_V3_FAILED\"); export default result;",[307],"45c7bf23-e774-4234-ba72-b87d5616633f","payana_opportunity_census_v2.ts","01a07f42-c11a-7588-86ec-27f73e4d7a2e",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_opportunity_census_v2_20260907_2240_brt\";\n\nconst candidates = [\n {\n id: \"originprotocol_immunefi\",\n title: \"Origin Protocol / Immunefi bug bounty\",\n platform: \"Immunefi\",\n url: \"https://immunefi.com/bug-bounty/originprotocol/information/\",\n status: \"ACTIVE_PRIORITY_A_PASSIVE_SOURCE_REVIEW\",\n min: \"500\",\n max: \"1000000\",\n currency: \"USD\",\n kyc: \"NO_KYC\",\n capital: \"ZERO_CAPITAL_LOCAL_STATIC_OR_FORK_RESEARCH\",\n deadline: null,\n score: 94,\n evidence: \"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\n source: \"Immunefi official Origin Protocol program\",\n constraints: [\n \"Last updated 2026-09-07\",\n \"Web/app Critical up to USD 25,000; lower-severity website rewards governed by V2.3 terms\",\n \"Smart contract High USD 2,000-15,000; Medium USD 500-2,000\",\n \"No KYC\",\n \"PoC always required\",\n \"139.2k total paid from 40 reports; median resolution 7 hours\",\n \"No mainnet/public-testnet deployed testing; use local forks/static review\",\n \"No phishing, DoS, third-party testing, or significant automated traffic\",\n \"Public JavaScript/TypeScript/Solidity codebases available\",\n \"Vault currently low-funded but payouts are described as direct by Origin; vault balance is not treated as payout guarantee\"\n ]\n },\n {\n id: \"obyte_immunefi\",\n title: \"Obyte / Immunefi bug bounty\",\n platform: \"Immunefi\",\n url: \"https://immunefi.com/bug-bounty/obyte/information/\",\n status: \"ACTIVE_PRIORITY_A_PASSIVE_SOURCE_REVIEW\",\n min: \"1000\",\n max: \"50000\",\n currency: \"USD\",\n kyc: \"NO_KYC\",\n capital: \"ZERO_CAPITAL_LOCAL_STATIC_OR_FORK_RESEARCH\",\n deadline: null,\n score: 93,\n evidence: \"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\n source: \"Immunefi official Obyte program\",\n constraints: [\n \"Last updated 2026-07-21\",\n \"Web/app Medium USD 1,000; High USD 1,700; Critical USD 2,500\",\n \"No KYC\",\n \"PoC always required\",\n \"87.4k total paid from 285 reports; median resolution 13 hours\",\n \"Core library and wallet are explicitly in scope\",\n \"Primary codebase is JavaScript and public on GitHub\",\n \"No mainnet/public-testnet deployed testing; static review/local harness only\",\n \"No phishing, DoS, third-party testing, or significant automated traffic\"\n ]\n },\n {\n id: \"gmx_immunefi\",\n title: \"GMX / Immunefi bug bounty\",\n platform: \"Immunefi\",\n url: \"https://immunefi.com/bug-bounty/gmx/information/\",\n status: \"ACTIVE_PRIORITY_B_HIGH_REWARD_HIGH_COMPLEXITY\",\n min: \"10000\",\n max: \"5000000\",\n currency: \"USD\",\n kyc: \"NO_KYC\",\n capital: \"ZERO_CAPITAL_LOCAL_STATIC_OR_FORK_RESEARCH\",\n deadline: null,\n score: 89,\n evidence: \"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\n source: \"Immunefi official GMX program\",\n constraints: [\n \"Last updated 2026-09-02\",\n \"Web/app Medium USD 10,000; High USD 25,000; Critical USD 50,000\",\n \"No KYC\",\n \"PoC required\",\n \"2.6M total paid from 24 reports; median resolution 10 hours\",\n \"JavaScript/TypeScript/Solidity\",\n \"High technical complexity and duplicate risk\",\n \"No mainnet/public-testnet deployed testing\"\n ]\n },\n {\n id: \"blockpi_immunefi\",\n title: \"BlockPI Network / Immunefi bug bounty\",\n platform: \"Immunefi\",\n url: \"https://immunefi.com/bug-bounty/blockpinetwork/information/\",\n status: \"ACTIVE_PRIORITY_B_WEB_APP_LOW_FLOOR\",\n min: \"1000\",\n max: \"5000\",\n currency: \"USD\",\n kyc: \"NO_KYC\",\n capital: \"ZERO_CAPITAL_RESEARCH_PATH\",\n deadline: null,\n score: 88,\n evidence: \"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\n source: \"Immunefi official BlockPI program\",\n constraints: [\n \"Web/app Low USD 1,000; Medium USD 1,200; High USD 1,500; Critical up to USD 5,000\",\n \"No KYC\",\n \"PoC with end effect required\",\n \"29.5k total paid\",\n \"No unsafe live-chain or significant automated traffic\"\n ]\n },\n {\n id: \"ankr_immunefi\",\n title: \"Ankr / Immunefi bug bounty\",\n platform: \"Immunefi\",\n url: \"https://immunefi.com/bug-bounty/ankr/information/\",\n status: \"ACTIVE_PRIORITY_B_WEB_APP_JS\",\n min: \"2000\",\n max: \"500000\",\n currency: \"USD\",\n kyc: \"NO_KYC\",\n capital: \"ZERO_CAPITAL_LOCAL_STATIC_OR_FORK_RESEARCH\",\n deadline: null,\n score: 86,\n evidence: \"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\n source: \"Immunefi official Ankr program\",\n constraints: [\n \"Web/app Medium up to USD 2,000; High up to USD 5,000; Critical up to USD 10,000\",\n \"No KYC\",\n \"PoC with code/end effect required\",\n \"Main Web App is listed in scope\",\n \"JavaScript ecosystem\",\n \"17.7k total paid; median resolution 3 days\",\n \"No mainnet/public-testnet deployed testing\"\n ]\n },\n {\n id: \"sky_immunefi\",\n title: \"Sky / Immunefi bug bounty\",\n platform: \"Immunefi\",\n url: \"https://immunefi.com/bug-bounty/sky/information/\",\n status: \"ACTIVE_PRIORITY_B_HIGH_REWARD_HIGH_COMPLEXITY\",\n min: \"1000\",\n max: \"10000000\",\n currency: \"USD\",\n kyc: \"NO_KYC\",\n capital: \"ZERO_CAPITAL_LOCAL_STATIC_OR_FORK_RESEARCH\",\n deadline: null,\n score: 85,\n evidence: \"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\n source: \"Immunefi official Sky program\",\n constraints: [\n \"Last updated 2026-09-04\",\n \"Web/app Medium USD 2,500; High USD 5,000; Critical up to USD 100,000\",\n \"No KYC\",\n \"PoC required\",\n \"Large/highly audited codebase; duplicate risk and complexity high\",\n \"No mainnet/public-testnet deployed testing\"\n ]\n },\n {\n id: \"spark_immunefi\",\n title: \"Spark / Immunefi bug bounty\",\n platform: \"Immunefi\",\n url: \"https://immunefi.com/bug-bounty/sparklend/information/\",\n status: \"ACTIVE_PRIORITY_B_KNOWN_ISSUE_ASSURANCE\",\n min: \"2500\",\n max: \"5000000\",\n currency: \"USD\",\n kyc: \"NO_KYC\",\n capital: \"ZERO_CAPITAL_LOCAL_STATIC_OR_FORK_RESEARCH\",\n deadline: null,\n score: 85,\n evidence: \"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\n source: \"Immunefi official Spark program\",\n constraints: [\n \"Last updated 2026-08-13\",\n \"Web/app High USD 2,500-5,000; Critical USD 5,000-50,000\",\n \"No KYC\",\n \"PoC required\",\n \"Known Issue Assurance enabled\",\n \"No mainnet/public-testnet deployed testing\"\n ]\n },\n {\n id: \"threshold_immunefi\",\n title: \"Threshold Network / Immunefi bug bounty\",\n platform: \"Immunefi\",\n url: \"https://immunefi.com/bug-bounty/thresholdnetwork/information/\",\n status: \"ACTIVE_PRIORITY_C_KNOWN_ISSUES_RECENT\",\n min: \"300\",\n max: \"150000\",\n currency: \"USD\",\n kyc: \"NO_KYC\",\n capital: \"ZERO_CAPITAL_LOCAL_STATIC_OR_FORK_RESEARCH\",\n deadline: null,\n score: 82,\n evidence: \"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\n source: \"Immunefi official Threshold Network program\",\n constraints: [\n \"Web/app Medium USD 300; High USD 1,000; Critical USD 1,000-3,000\",\n \"No KYC\",\n \"PoC required\",\n \"Recent known-issue updates through 2026-08-29 reduce duplicate surface uncertainty\",\n \"JavaScript/Solidity\",\n \"No mainnet/public-testnet deployed testing\"\n ]\n },\n {\n id: \"pancakeswap_immunefi\",\n title: \"PancakeSwap / Immunefi bug bounty\",\n platform: \"Immunefi\",\n url: \"https://immunefi.com/bug-bounty/pancakeswap/information/\",\n status: \"ACTIVE_PRIORITY_C_FIX_REQUIRED_FOR_PAYOUT\",\n min: \"1500\",\n max: \"1000000\",\n currency: \"USD\",\n kyc: \"NO_KYC\",\n capital: \"ZERO_CAPITAL_LOCAL_STATIC_OR_FORK_RESEARCH\",\n deadline: null,\n score: 79,\n evidence: \"OFFICIAL_SOURCE_VERIFIED_2026_09_07\",\n source: \"Immunefi official PancakeSwap program\",\n constraints: [\n \"Web/app Medium up to USD 1,500; High up to USD 4,000; Critical up to USD 7,500\",\n \"No KYC\",\n \"PoC required\",\n \"Reward only if a fix is implemented\",\n \"Website scope restricted to pancakeswap.finance\",\n \"Known issues updated through 2026-08-24\",\n \"No unsafe live-chain testing\"\n ]\n },\n {\n id: \"opencv_ai_2026\",\n title: \"OpenCV AI Competition 2026 / AWS\",\n platform: \"Devpost\",\n url: \"https://opencv26.devpost.com/\",\n status: \"ACTIVE_MEDIUM_HORIZON_BUILD_REUSE\",\n min: \"1000\",\n max: \"5000\",\n currency: \"USD\",\n kyc: \"WINNER_TAX_ELIGIBILITY_DOCS\",\n capital: \"ZERO_PURCHASE_ENTRY_BUT_AWS_COMPONENT_REQUIRED\",\n deadline: \"2026-10-27T06:45:00Z\",\n score: 74,\n evidence: \"OFFICIAL_RULES_VERIFIED_2026_09_07\",\n source: \"Devpost official OpenCV competition rules\",\n constraints: [\n \"Up to USD 12,000 total cash: 5k/3k/2k overall + two 1k special awards\",\n \"OpenCV 5 substantive vision component required\",\n \"Meaningful component must run on AWS\",\n \"Public-facing final artifacts and documentation/video expected\",\n \"1285 participants at current census\",\n \"Winner eligibility and tax documentation required\",\n \"No explicit Brazil exclusion found in current rules page; final eligibility terms still control\"\n ]\n },\n {\n id: \"ai_builders_2026\",\n title: \"AI Builders Hackathon 2026\",\n platform: \"Devpost\",\n url: \"https://ai-builders-hackathon-2026.devpost.com/\",\n status: \"ACTIVE_RULES_PRIZE_CONFLICT_LOW_CONFIDENCE\",\n min: null,\n max: null,\n currency: \"USD\",\n kyc: \"UNVERIFIED_WINNER_DOCS\",\n capital: \"ZERO_CAPITAL_BUILD_PATH\",\n deadline: \"2026-09-16T03:00:00Z\",\n score: 58,\n evidence: \"OFFICIAL_RULES_AND_OVERVIEW_CONFLICT\",\n source: \"Devpost official AI Builders rules and overview\",\n constraints: [\n \"Rules say worldwide and explicitly include software developers, engineers, founders and entrepreneurs\",\n \"Overview metadata simultaneously displays Students only\",\n \"Rules currently list prizes as TBD while overview advertises USD 33,900 cash\",\n \"Public source repository required\",\n \"Demo video recommended/required by submission text\",\n \"2929 participants\",\n \"Do not invest significant build effort until eligibility/prize conflict is resolved\"\n ]\n },\n {\n id: \"boss_dev_current\",\n title: \"Boss.dev coding bounties\",\n platform: \"Boss.dev\",\n url: \"https://www.boss.dev/\",\n status: \"REJECTED_PAYOUT_COUNTRY_UNSUPPORTED_BRAZIL\",\n min: \"5\",\n max: \"2000\",\n currency: \"USD\",\n kyc: \"PERSONAL_AND_BANK_DETAILS_REQUIRED\",\n capital: \"ZERO_CAPITAL_CODING_PATH\",\n deadline: null,\n score: 0,\n evidence: \"OFFICIAL_DOCS_COUNTRY_INELIGIBLE\",\n source: \"Boss.dev official docs\",\n constraints: [\n \"Brazil is absent from Boss.dev supported earner countries\",\n \"Earner must provide GitHub account, Boss account, bank account and personal details\",\n \"Do not spend implementation time while Brazil payout remains unsupported\"\n ]\n },\n {\n id: \"nebius_nvidia_2026\",\n title: \"Nebius x NVIDIA Global AI Hackathon\",\n platform: \"Devpost\",\n url: \"https://nebiusglobalaihackathon.devpost.com/\",\n status: \"REJECTED_GEOGRAPHIC_INELIGIBLE_BRAZIL\",\n min: \"100\",\n max: \"20000\",\n currency: \"USD\",\n kyc: \"WINNER_VERIFICATION\",\n capital: \"ZERO_PURCHASE_ENTRY\",\n deadline: \"2026-10-30T17:00:00Z\",\n score: 0,\n evidence: \"OFFICIAL_RULES_EXPLICIT_BRAZIL_EXCLUSION\",\n source: \"Devpost official Nebius x NVIDIA rules\",\n constraints: [\"Official rules explicitly list Brazil among excluded places\", \"Do not build for revenue eligibility\"]\n },\n {\n id: \"amazon_build_ship_shape_2026\",\n title: \"Build, Ship, Shape: Amazon Developer Hackathon\",\n platform: \"Devpost\",\n url: \"https://amazonappdev2026.devpost.com/\",\n status: \"REJECTED_GEOGRAPHIC_INELIGIBLE_BRAZIL\",\n min: \"4000\",\n max: \"25000\",\n currency: \"USD\",\n kyc: \"WINNER_IDENTITY_TAX_FORMS\",\n capital: \"ZERO_PURCHASE_ENTRY\",\n deadline: \"2026-10-23T19:00:00Z\",\n score: 0,\n evidence: \"OFFICIAL_RULES_EXPLICIT_BRAZIL_EXCLUSION\",\n source: \"Devpost official Amazon Developer rules\",\n constraints: [\"Official rules explicitly list Brazil among excluded places\", \"Do not build for revenue eligibility\"]\n }\n];\n\nconst invariantState = {\n version: \"opportunity-integrity-2.0.0\",\n generatedAt: now,\n invariants: [\n \"MARKETPLACE_LISTING != PAYABLE_OPEN_ISSUE\",\n \"PROGRAM_ACTIVE != CANDIDATE_PAYABLE\",\n \"HEADLINE_PRIZE != CASH_PRIZE\",\n \"COUNTRY_NOT_LISTED_AS_EXCLUDED != ACCOUNT_ELIGIBILITY_PROVEN\",\n \"PUBLIC_SOURCE_AVAILABLE != NOVEL_FINDING_EXISTS\",\n \"BUG_FOUND != BOUNTY_PAYABLE\",\n \"KYC_NOT_REQUIRED != ZERO_PAYOUT_FRICTION\",\n \"FETCH_FAIL != ZERO_OPEN\"\n ],\n rejectedSurfaces: {\n bossDev: \"BRAZIL_NOT_SUPPORTED_FOR_EARNERS\",\n amazonDeveloperHackathon: \"BRAZIL_EXPLICITLY_EXCLUDED\",\n nebiusNvidiaHackathon: \"BRAZIL_EXPLICITLY_EXCLUDED\",\n algora: \"CURRENT_PUBLIC_BOUNTY_API_REPORTED_NO_OPEN_BOUNTIES_AT_LAST_CENSUS\",\n opire: \"LISTINGS_REQUIRE_ORIGINAL_ISSUE_AND_REWARD_SOURCE_VALIDATION_DUE_STALE_CLOSED_DELETED_EXAMPLES\"\n },\n priority: [\n \"originprotocol_immunefi\",\n \"obyte_immunefi\",\n \"gmx_immunefi\",\n \"blockpi_immunefi\",\n \"ankr_immunefi\",\n \"sky_immunefi\",\n \"spark_immunefi\",\n \"threshold_immunefi\",\n \"pancakeswap_immunefi\",\n \"opencv_ai_2026\"\n ],\n nextResearchLane: {\n primary: \"originprotocol_immunefi\",\n secondary: \"obyte_immunefi\",\n rationale: \"Both are no-KYC, zero-capital-compatible, current, have public source, demonstrated payout history, fast historical resolution, and can be investigated passively/local-only without prohibited live testing. Origin has larger web/app upside; Obyte has far more paid-report throughput and a JavaScript wallet/core surface.\"\n }\n};\n\nconst stmts:any[] = [];\nfor (const c of candidates) {\n stmts.push({\n sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [c.id,c.title,c.platform,c.url,c.status,c.min,c.max,c.currency,c.kyc,c.capital,c.deadline,JSON.stringify({score:c.score,constraints:c.constraints}),now,c.evidence,c.source,now,now]\n });\n}\nstmts.push({\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"opportunity_integrity_census_v2\", JSON.stringify(invariantState), \"MULTI_SOURCE_OFFICIAL_CURRENTNESS_CENSUS\", checkpointId, now, now]\n});\nstmts.push({\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\"action-opportunity-census-v2\", null, \"OPPORTUNITY_CENSUS\", \"COMPLETED\", \"LOW\", \"USER_CONTINUE_OTHER_POSSIBILITIES\", 1, \"Re-census zero-capital revenue opportunities with source-of-truth validation\", `Ranked ${candidates.length} candidates; promoted Origin and Obyte; rejected Boss/Amazon/Nebius for payout/geographic rules; preserved marketplace-listing integrity gate.`, null, now, now, \"OFFICIAL_SOURCE_CENSUS\", now, now]\n});\nstmts.push({\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify({id:checkpointId,status:\"OTHER_REVENUE_LANES_RANKED_ORIGIN_AND_OBYTE_PROMOTED\",doNotRestart:true,primary:\"originprotocol_immunefi\",secondary:\"obyte_immunefi\",binanceState:\"TECHNICAL_GREEN_EXTERNAL_GATES_REMAIN\",rev000001:\"USER_CONFIRMED_RECEIPT_UNVERIFIED\"}), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now]\n});\n\nawait db.batch(stmts);\n\nconst rows = await db.execute({sql:\"SELECT id,status,evidence_state,constraints_json FROM payana_opportunities WHERE id IN (?,?,?,?,?,?,?,?,?,?,?,?,?,?) ORDER BY id\",args:candidates.map(c=>c.id)});\nconst state = await db.execute({sql:\"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?) ORDER BY key\",args:[\"opportunity_integrity_census_v2\",\"current_checkpoint\"]});\nconst action = await db.execute({sql:\"SELECT id,status,evidence_state FROM payana_actions WHERE id=?\",args:[\"action-opportunity-census-v2\"]});\nconst pass = storage.activeProvider === \"turso\" && rows.rows.length === candidates.length && state.rows.length === 2 && action.rows.length === 1;\nconst result = {pass,provider:storage.activeProvider,checkpointId,candidateCount:rows.rows.length,state:state.rows,action:action.rows[0],top:invariantState.priority.slice(0,5)};\nconsole.log(JSON.stringify(result));\nif(!pass) throw new Error(\"PAYANA_OPPORTUNITY_CENSUS_V2_FAILED\");\nexport default result;\n",[313],"b0ff65ac-f157-45ee-abd0-3456b1a483f7","payana_negative_controls.ts","01a07f42-c11a-7588-86ec-20011d610ab2",["D",1788841476385],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst cases = [\n { id:\"payana_neg_bad_decimal_v1\", action:\"payana_economic_upsert\", payload:{id:\"NEG-ECO-1\",eventType:\"REVENUE\",amount:\"0.01USD\",currency:\"USD\",evidenceState:\"TEST\"}, expected:\"INVALID_DECIMAL_STRING\" },\n { id:\"payana_neg_http_url_v1\", action:\"payana_opportunity_upsert\", payload:{id:\"NEG-OPP-1\",title:\"negative\",url:\"http://example.com\",status:\"TEST\",evidenceState:\"TEST\"}, expected:\"HTTPS_URL_REQUIRED\" },\n { id:\"payana_neg_bad_sha_v1\", action:\"payana_receipt_upsert\", payload:{id:\"NEG-REC-1\",subjectType:\"economic_event\",subjectId:\"REV-000001\",receiptType:\"TEST\",sha256:\"not-a-sha\",verificationState:\"TEST\"}, expected:\"INVALID_SHA256\" },\n];\n\nfor (const c of cases) {\n await control.execute({sql:`INSERT INTO vault_bridge_requests(id,created_at,updated_at,status,action,payload_json,result_json,error,attempt_count)\n VALUES(?,datetime('now'),datetime('now'),'PENDING',?,?,NULL,NULL,0)\n ON CONFLICT(id) DO UPDATE SET status='PENDING',action=excluded.action,payload_json=excluded.payload_json,result_json=NULL,error=NULL,attempt_count=0,updated_at=datetime('now')`,args:[c.id,c.action,JSON.stringify(c.payload)]});\n}\nconsole.log(JSON.stringify({queued:cases.map(c=>({id:c.id,expected:c.expected})),note:\"Run vault_bridge.ts three times on payana-ledger-v1, then inspect statuses\"}));\nexport default cases;\n",[319],"3ab41e08-806d-4737-9834-a9904fb7a711","payana_final_freeze_20260908_checkpoint.ts","01a07f42-c11a-7588-86ec-1cf079734c8f",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst freeze = {\n val: \"cleitoncosta/payana-agent-os-track-a-final-freeze-20260908\",\n createdAt: \"2026-09-08T00:35:54.827Z\",\n sourceProductionMainVersion: 52,\n independentAudit: { pass: true, assertions: 189, mutationSteps: 35, total: 224, auditedAt: \"2026-09-08T00:36:12.075Z\" },\n databaseContentsCopied: false,\n purpose: \"immutable-style public backup of final Track A technical package\"\n};\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_agent_os_final_backup_20260908\", JSON.stringify(freeze), \"VERIFIED_DETACHED_BACKUP_RUNTIME_TESTED_224_PASS\", freeze.val, now, now]\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-final-frozen-backup-20260908\", \"action\", \"binance_track_a_final_freeze_20260908\", \"CANONICAL_FINAL_FROZEN_VAL_RECEIPT\", freeze.val, null, JSON.stringify(freeze), \"VERIFIED_RUNTIME_224_PASS\", now, now, now]\n }\n]);\nconst state = await db.execute({sql:\"SELECT key,evidence_state,source_ref FROM payana_state WHERE key=?\",args:[\"binance_agent_os_final_backup_20260908\"]});\nconst receipt = await db.execute({sql:\"SELECT id,verification_state,locator FROM payana_receipts WHERE id=?\",args:[\"receipt-binance-final-frozen-backup-20260908\"]});\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 1 && receipt.rows.length === 1;\nconst result = {pass, provider:storage.activeProvider, state:state.rows[0], receipt:receipt.rows[0]};\nconsole.log(JSON.stringify(result));\nif(!pass) throw new Error(\"PAYANA_FINAL_FREEZE_20260908_CHECKPOINT_FAILED\");\nexport default result;\n",[325],"0a7c11a6-dd03-4445-bf22-ecbd012e64e8","payana_eligibility_integrity_v4_selftest.ts","e316a4fc-ab3e-11f1-a9e0-1607ee4eb77e",16,["D",1788842201133],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst tests:{name:string,pass:boolean,detail?:unknown}[]=[];\nconst add=(name:string,pass:boolean,detail?:unknown)=>tests.push({name,pass,detail});\n\nconst ids=[\n \"open_agent_hackathon_2026\",\n \"ibm_bob_2_2026\",\n \"hackerrank_orchestrate_sep26\",\n \"call_e_2026\",\n \"agents_for_humans_2026\",\n \"amazon_build_ship_shape_2026\",\n \"nebius_nvidia_2026\",\n \"opencv_ai_2026\",\n];\nconst q=await db.execute({sql:`SELECT id,status,capital_state,kyc_state,deadline_at,constraints_json,evidence_state FROM payana_opportunities WHERE id IN (${ids.map(()=>\"?\").join(\",\")})`,args:ids});\nconst byId=new Map(q.rows.map((r:any)=>[String(r.id),r]));\nadd(\"storage_provider_is_turso\",storage.activeProvider===\"turso\",storage.activeProvider);\nadd(\"all_expected_rows_present\",ids.every(id=>byId.has(id)),[...byId.keys()]);\n\nconst open:any=byId.get(\"open_agent_hackathon_2026\");\nadd(\"open_agent_status_active_prebuild\",open?.status===\"ACTIVE_ZERO_ENTRY_FEE_BRAZIL_ELIGIBLE_BUILD_WINDOW_NOT_OPEN\",open?.status);\nconst openConstraints=open?JSON.parse(String(open.constraints_json)):null;\nconst openText=JSON.stringify(openConstraints??{});\nadd(\"open_agent_exact_0900_commit_gate\",openText.includes(\"2026-10-07 09:00 UTC\")||openText.includes(\"2026-10-07T09:00:00Z\"),openConstraints);\nadd(\"open_agent_preexisting_declared_rule\",openText.toLowerCase().includes(\"pre-existing\")&&openText.toLowerCase().includes(\"declared\"));\nadd(\"open_agent_submission_evidence_rule\",openText.includes(\"<=3 minute demo video\")&&openText.toLowerCase().includes(\"failure modes\"));\nadd(\"open_agent_zero_entry\",String(open?.capital_state)===\"ZERO_ENTRY_FEE\",open?.capital_state);\n\nconst ibm:any=byId.get(\"ibm_bob_2_2026\");\nadd(\"ibm_bob_status_has_eligibility_gate\",String(ibm?.status).includes(\"ELIGIBILITY_FORM_GATE\"),ibm?.status);\nadd(\"ibm_bob_non_us_payout_docs\",String(ibm?.kyc_state)===\"WINNER_W8BEN_GOV_ID_BANK_VERIFICATION\",ibm?.kyc_state);\nconst ibmText=ibm?JSON.stringify(JSON.parse(String(ibm.constraints_json))):\"\";\nadd(\"ibm_bob_gross_not_net\",ibmText.includes(\"30%\")&&ibmText.toLowerCase().includes(\"bank fees\"));\n\nfor(const id of [\"call_e_2026\",\"agents_for_humans_2026\",\"amazon_build_ship_shape_2026\",\"nebius_nvidia_2026\"]){\n const r:any=byId.get(id); add(`${id}_rejected_brazil`,r?.status===\"REJECT_INELIGIBLE_GEOGRAPHY_BRAZIL\",r?.status);\n}\nconst cv:any=byId.get(\"opencv_ai_2026\");\nadd(\"opencv_corrected_to_brazil_ineligible\",cv?.status===\"INELIGIBLE_GEOGRAPHY_BRAZIL\",cv?.status);\nconst hr:any=byId.get(\"hackerrank_orchestrate_sep26\");\nadd(\"hackerrank_fail_closed_on_missing_geo_terms\",hr?.status===\"ACTIVE_SHORT_HORIZON_BRAZIL_ELIGIBILITY_UNVERIFIED\",hr?.status);\n\nconst st=await db.execute({sql:\"SELECT key,value_json,evidence_state FROM payana_state WHERE key IN (?,?,?)\",args:[\"eligibility_integrity_v4\",\"current_checkpoint\",\"opportunity_watch_v4\"]});\nconst stateMap=new Map(st.rows.map((r:any)=>[String(r.key),r]));\nadd(\"integrity_state_present\",stateMap.has(\"eligibility_integrity_v4\"));\nadd(\"checkpoint_present\",stateMap.has(\"current_checkpoint\"));\nadd(\"watch_state_present\",stateMap.has(\"opportunity_watch_v4\"));\nconst cp:any=stateMap.get(\"current_checkpoint\"); const cpv=cp?JSON.parse(String(cp.value_json)):{};\nadd(\"checkpoint_do_not_restart\",cpv.doNotRestart===true,cpv);\nadd(\"checkpoint_open_agent_gate\",String(cpv.openAgentCommitGate||\"\").includes(\"2026_10_07T09_00_00Z\"),cpv.openAgentCommitGate);\nadd(\"rev000001_not_upgraded\",cpv.rev000001===\"USER_CONFIRMED_RECEIPT_UNVERIFIED\",cpv.rev000001);\n\nconst watch:any=stateMap.get(\"opportunity_watch_v4\"); const wv=watch?JSON.parse(String(watch.value_json)):{};\nadd(\"watch_read_only_boundaries\",Array.isArray(wv.boundaries)&&[\"READ_ONLY_GETS\",\"NO_REGISTRATION\",\"NO_SUBMISSION\",\"NO_SPEND\"].every(x=>wv.boundaries.includes(x)),wv.boundaries);\nadd(\"watch_has_material_digest\",typeof wv.materialDigest===\"string\"&&wv.materialDigest.length===64,wv.materialDigest);\n\nconst monitorActions=await db.execute({sql:\"SELECT COUNT(*) AS n FROM payana_actions WHERE action_type='MONITOR_CHANGE' AND input_summary LIKE '%prioritized opportunity surfaces%'\",args:[]});\nconst n=Number((monitorActions.rows[0] as any)?.n??0);\nadd(\"monitor_change_receipts_bounded\",n>=1&&n<=5,n);\n\nconst passed=tests.filter(t=>t.pass).length; const failed=tests.filter(t=>!t.pass);\nconst result={pass:failed.length===0,passed,total:tests.length,failed,tests};\nconsole.log(JSON.stringify(result));\nif(!result.pass) throw new Error(`PAYANA_ELIGIBILITY_V4_SELFTEST_FAILED:${failed.map(x=>x.name).join(\",\")}`);\nexport default result;",[331],"569a6e55-dc76-45d3-9614-d2d8b5ccfd5b","payana_eligibility_integrity_v4.ts","4f38b942-ab3d-11f1-9ddf-1607ee4eb77e",12,["D",1788841943861],6,"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_eligibility_integrity_v4_20260908_0128_brt\";\n\nconst opencvRows = await db.execute({\n sql: \"SELECT id,title FROM payana_opportunities WHERE lower(title) LIKE '%opencv%' OR lower(id) LIKE '%opencv%'\",\n args: [],\n});\nfor (const row of opencvRows.rows) {\n await db.execute({\n sql: `UPDATE payana_opportunities SET status=?, capital_state=?, evidence_state=?, source_ref=?, currentness_at=?, updated_at=?, constraints_json=? WHERE id=?`,\n args: [\n \"INELIGIBLE_GEOGRAPHY_BRAZIL\",\n \"NO_PURCHASE_BUT_INELIGIBLE_RESIDENCY\",\n \"OFFICIAL_OPENCV_RULES_EXPLICIT_BRAZIL_EXCLUSION_2026_09_08\",\n \"OpenCV official 2026 competition eligibility / Devpost official rules\",\n now,\n now,\n JSON.stringify({\n score: 0,\n constraints: [\n \"Official competition eligibility explicitly excludes participants residing in Brazil.\",\n \"Marketing language such as global/from anywhere does not override legal geographic eligibility.\",\n \"Do not register, build for prize, spend AWS credits, or count this lane toward expected revenue while resident in Brazil.\",\n ],\n }),\n String(row.id),\n ],\n });\n}\n\nconst rows = [\n {\n id: \"open_agent_hackathon_2026\",\n title: \"Open Agent Hackathon 2026\",\n platform: \"GenAI.Works\",\n url: \"https://hackathon.genai.works/event/open-agent-hackathon-2026\",\n status: \"ACTIVE_ZERO_ENTRY_FEE_BRAZIL_ELIGIBLE_BUILD_WINDOW_NOT_OPEN\",\n min: \"1000\",\n max: \"8000\",\n cur: \"USD\",\n kyc: \"WINNER_PAYOUT_DOCUMENTATION_UNVERIFIED\",\n capital: \"ZERO_ENTRY_FEE\",\n deadline: \"2026-10-09T23:45:00Z\",\n score: 96,\n evidence: \"OFFICIAL_EVENT_PAGE_EXPLICIT_WORLDWIDE_AND_FREE_2026_09_08\",\n source: \"GenAI.Works Open Agent Hackathon 2026 official event page\",\n constraints: [\n \"Registration closes 2026-10-05 00:00 UTC; event-specific binding rules say eligible building starts 2026-10-07 09:00 UTC and submissions close 2026-10-09 23:45 UTC.\",\n \"Official page explicitly says open worldwide to age 16+ and registration/workspace/submission are free.\",\n \"Teams 1-5; fully online.\",\n \"Grand prize USD 8,000, runner-up USD 4,000, third USD 2,000; track bounties include code-shipping USD 2,000, operations USD 2,000, research USD 1,500 and other tracks.\",\n \"Rule 4: work committed before the window is not eligible except clearly declared pre-existing components.\",\n \"Rule 5: pre-existing open-source libraries are allowed; pre-existing product code must be declared; generated code is allowed and participant remains accountable.\",\n \"Rule 6: submission requires repository access, running deployment or container+one-command run, <=3 minute demo video, and written failure modes.\",\n \"Rule 8: event page says bank-transfer prizes within 30 days of results; taxes/local charges are recipient responsibility. General GenAI terms allow international bank transfer and note transfer fees may reduce award.\",\n \"Do not create competition-specific commits before 2026-10-07 09:00 UTC. Research, architecture notes, reusable generic tooling and clearly declared pre-existing components are the safe pre-window lane.\",\n \"Account registration/sign-in is an external identity action and remains a human gate.\",\n ],\n },\n {\n id: \"hackerrank_orchestrate_sep26\",\n title: \"HackerRank Orchestrate September 2026\",\n platform: \"HackerRank\",\n url: \"https://www.hackerrank.com/hackerrank-orchestrate-september26\",\n status: \"ACTIVE_SHORT_HORIZON_BRAZIL_ELIGIBILITY_UNVERIFIED\",\n min: \"300\",\n max: \"1200\",\n cur: \"USD\",\n kyc: \"PRIZE_ELIGIBILITY_TERMS_NOT_RECOVERED\",\n capital: \"NO_PURCHASE_SIGNAL_TERMS_UNVERIFIED\",\n deadline: \"2026-09-13T12:30:00Z\",\n score: 82,\n evidence: \"OFFICIAL_EVENT_PAGE_CURRENT_RULES_GAP_2026_09_08\",\n source: \"HackerRank Orchestrate September 2026 official page\",\n constraints: [\n \"Challenge starts 2026-09-12 18:00 IST and lasts 24 hours.\",\n \"Required artifacts include code, agent output and AI chat transcript; 30-minute voice interview with AI judge follows submission.\",\n \"Official page advertises USD 1,200 first place and USD 300 for places 2-5.\",\n \"Prior editions had participants from ~48 countries, but that is not proof that a Brazil-resident is prize-eligible in this edition.\",\n \"No explicit September-2026 legal eligibility/territory terms were recovered; do not register or count as executable revenue until resolved.\",\n ],\n },\n {\n id: \"ibm_bob_2_2026\",\n title: \"IBM Bob 2.0 Hackathon\",\n platform: \"lablab.ai / IBM\",\n url: \"https://lablab.ai/ai-hackathons/ibm-bob-2-hackathon\",\n status: \"ACTIVE_ZERO_ENTRY_COST_PAYOUT_PATH_FOR_NON_US_ELIGIBILITY_FORM_GATE\",\n min: \"2000\",\n max: \"5000\",\n cur: \"USD\",\n kyc: \"WINNER_W8BEN_GOV_ID_BANK_VERIFICATION\",\n capital: \"SPONSOR_PROVISIONED_BOB_ACCESS_ZERO_PURCHASE_SIGNAL\",\n deadline: \"2026-09-27T15:00:00Z\",\n score: 90,\n evidence: \"OFFICIAL_LABLAB_EVENT_AND_PAYOUT_TERMS_VERIFIED_2026_09_08\",\n source: \"lablab.ai IBM Bob 2.0 event page + Terms of Use sections 16-17\",\n constraints: [\n \"48-hour online build 2026-09-25 15:00 UTC through 2026-09-27 15:00 UTC; IBM Bob 2.0 access is provisioned to participants at start.\",\n \"USD 10,000 pool: 5,000 / 3,000 / 2,000.\",\n \"Event page does not contain a Brazil exclusion and is promoted as fully online/build-from-anywhere, but final eligibility is checked in enrollment/event criteria.\",\n \"General lablab prize policy supports non-US recipients by SWIFT international wire and requires W-8BEN, government photo ID and bank account verification in winner name.\",\n \"For non-US recipients, terms state standard 30% US federal withholding unless treaty relief applies; bank fees may also reduce gross prize.\",\n \"Submissions must be original, open source and MIT-compliant unless event specifies otherwise; Bob task-session summary screenshots are required.\",\n \"Do not count gross advertised prize as net revenue; account enrollment is an external identity gate.\",\n ],\n },\n\n {\n id: \"call_e_2026\",\n title: \"CALL-E: Your Code Is Calling 2026\",\n platform: \"Devpost\",\n url: \"https://call-e.devpost.com/\",\n status: \"REJECT_INELIGIBLE_GEOGRAPHY_BRAZIL\",\n min: \"200\",\n max: \"4000\",\n cur: \"USD\",\n kyc: \"NOT_APPLICABLE_INELIGIBLE\",\n capital: \"NO_PURCHASE_BUT_INELIGIBLE_RESIDENCY\",\n deadline: \"2026-09-14T15:45:00Z\",\n score: 0,\n evidence: \"OFFICIAL_DEVPOST_RULES_EXPLICIT_BRAZIL_EXCLUSION_2026_09_08\",\n source: \"CALL-E Devpost official rules\",\n constraints: [\"Official rules explicitly exclude residents of Brazil.\", \"Do not pursue feedback-only USD 200 prize despite low-friction appearance.\"],\n },\n {\n id: \"agents_for_humans_2026\",\n title: \"Agents for Humans Hackathon 2026\",\n platform: \"Devpost\",\n url: \"https://agentsforhumans.devpost.com/\",\n status: \"REJECT_INELIGIBLE_GEOGRAPHY_BRAZIL\",\n min: \"2000\",\n max: \"5000\",\n cur: \"USD\",\n kyc: \"NOT_APPLICABLE_INELIGIBLE\",\n capital: \"NO_PURCHASE_BUT_INELIGIBLE_RESIDENCY\",\n deadline: \"2026-09-15T00:00:00Z\",\n score: 0,\n evidence: \"OFFICIAL_DEVPOST_RULES_EXPLICIT_BRAZIL_EXCLUSION_2026_09_08\",\n source: \"Agents for Humans Devpost official rules\",\n constraints: [\"Official rules explicitly exclude residents of Brazil.\", \"The worldwide marketing copy does not override the legal eligibility section.\"],\n },\n {\n id: \"amazon_build_ship_shape_2026\",\n title: \"Build, Ship, Shape: Amazon Developer Hackathon 2026\",\n platform: \"Devpost\",\n url: \"https://amazonappdev2026.devpost.com/\",\n status: \"REJECT_INELIGIBLE_GEOGRAPHY_BRAZIL\",\n min: \"4000\",\n max: \"25000\",\n cur: \"USD\",\n kyc: \"NOT_APPLICABLE_INELIGIBLE\",\n capital: \"NO_PURCHASE_BUT_INELIGIBLE_RESIDENCY\",\n deadline: \"2026-10-23T19:00:00Z\",\n score: 0,\n evidence: \"OFFICIAL_DEVPOST_RULES_EXPLICIT_BRAZIL_EXCLUSION_2026_09_08\",\n source: \"Amazon Developer Hackathon Devpost official rules\",\n constraints: [\"Official rules explicitly exclude residents of Brazil.\"],\n },\n {\n id: \"nebius_nvidia_2026\",\n title: \"Nebius x NVIDIA Global AI Hackathon 2026\",\n platform: \"Devpost\",\n url: \"https://nebiusglobalaihackathon.devpost.com/\",\n status: \"REJECT_INELIGIBLE_GEOGRAPHY_BRAZIL\",\n min: \"100\",\n max: \"20000\",\n cur: \"USD\",\n kyc: \"NOT_APPLICABLE_INELIGIBLE\",\n capital: \"NO_PURCHASE_BUT_INELIGIBLE_RESIDENCY\",\n deadline: \"2026-10-30T17:00:00Z\",\n score: 0,\n evidence: \"OFFICIAL_DEVPOST_RULES_EXPLICIT_BRAZIL_EXCLUSION_2026_09_08\",\n source: \"Nebius x NVIDIA Devpost official rules\",\n constraints: [\"Official rules explicitly exclude residents of Brazil.\"],\n },\n];\n\nfor (const c of rows) {\n await db.execute({\n sql: `INSERT INTO payana_opportunities(id,title,platform,url,status,reward_min_decimal,reward_max_decimal,currency,kyc_state,capital_state,deadline_at,constraints_json,currentness_at,evidence_state,source_ref,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title,platform=excluded.platform,url=excluded.url,status=excluded.status,reward_min_decimal=excluded.reward_min_decimal,reward_max_decimal=excluded.reward_max_decimal,currency=excluded.currency,kyc_state=excluded.kyc_state,capital_state=excluded.capital_state,deadline_at=excluded.deadline_at,constraints_json=excluded.constraints_json,currentness_at=excluded.currentness_at,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [c.id,c.title,c.platform,c.url,c.status,c.min,c.max,c.cur,c.kyc,c.capital,c.deadline,JSON.stringify({score:c.score,constraints:c.constraints}),now,c.evidence,c.source,now,now],\n });\n}\n\nconst integrity = {\n version: \"eligibility-integrity-4.0.0\",\n invariants: [\n \"DEVPOST_GLOBAL_UI != BRAZIL_ELIGIBLE\",\n \"EXPLICIT_GEOGRAPHY_RULE > OPEN_WORLDWIDE_MARKETING\",\n \"NO_RULES_FOUND != ELIGIBLE\",\n \"GLOBAL_PRIOR_PARTICIPATION != CURRENT_BRAZIL_PRIZE_ELIGIBILITY\",\n \"EXPLICIT_BRAZIL_EXCLUSION => REJECT\",\n \"ZERO_ENTRY_FEE != ZERO_IDENTITY_GATES\",\n \"BUILD_WINDOW_NOT_OPEN => NO_COMPETITION_SPECIFIC_IMPLEMENTATION_UNTIL_RULES_VERIFIED\",\n \"GROSS_PRIZE != NET_RECEIVABLE_AFTER_WITHHOLDING_AND_BANK_FEES\",\n \"NON_US_PAYOUT_PATH != EVENT_ELIGIBILITY_CONFIRMED\"\n ],\n corrected: opencvRows.rows.map((r:any)=>String(r.id)),\n promoted: [\"open_agent_hackathon_2026\",\"ibm_bob_2_2026\"],\n held: [\"hackerrank_orchestrate_sep26\",\"ibm_bob_2_2026 enrollment eligibility form\"],\n rejected: [\"call_e_2026\",\"agents_for_humans_2026\",\"amazon_build_ship_shape_2026\",\"nebius_nvidia_2026\",...opencvRows.rows.map((r:any)=>String(r.id))],\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"eligibility_integrity_v4\", JSON.stringify(integrity), \"OFFICIAL_LEGAL_ELIGIBILITY_CURRENTNESS\", checkpointId, now, now],\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\"action-eligibility-integrity-v4\", null, \"LEGAL_ELIGIBILITY_CENSUS\", \"COMPLETED\", \"LOW\", \"USER_CONTINUE_LOOP\", 1,\n \"Falsify apparent zero-capital/global opportunities against binding geographic rules\",\n `Corrected ${opencvRows.rows.length} OpenCV row(s); added explicit Brazil rejects for CALL-E/AWS/Amazon/Nebius; promoted Open Agent after exact hidden-rule extraction; added IBM Bob 2.0 with non-US SWIFT/W-8BEN payout path but enrollment eligibility gate; held HackerRank pending Brazil terms.`,\n\n null, now, now, \"OFFICIAL_CURRENT_RULES\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify({\n id: checkpointId,\n status: \"ELIGIBILITY_FILTERED_ZERO_CAPITAL_PIPELINE_V4\",\n doNotRestart: true,\n securityPrimary: \"originprotocol_immunefi\",\n securitySecondary: \"obyte_immunefi\",\n newlyPromoted: [\"open_agent_hackathon_2026\",\"ibm_bob_2_2026\"],\n shortHorizonHold: \"hackerrank_orchestrate_sep26\",\n ibmBobGate: \"ENROLLMENT_EVENT_ELIGIBILITY_FORM_EXTERNAL_IDENTITY_ACTION\",\n openAgentCommitGate: \"NO_COMPETITION_SPECIFIC_COMMITS_BEFORE_2026_10_07T09_00_00Z\",\n mediumHorizon: \"arc_agi_2_2026\",\n rev000001: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n }), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n]);\n\nconst check = await db.execute({\n sql: \"SELECT id,status,evidence_state FROM payana_opportunities WHERE id IN (?,?,?,?,?,?,?) OR lower(id) LIKE '%opencv%' ORDER BY id\",\n args: rows.map(x=>x.id),\n});\nconst stateCheck = await db.execute({sql:\"SELECT key FROM payana_state WHERE key IN (?,?)\",args:[\"eligibility_integrity_v4\",\"current_checkpoint\"]});\nconst pass = storage.activeProvider === \"turso\" && rows.every(c => check.rows.some((r:any)=>String(r.id)===c.id && String(r.status)===c.status)) && opencvRows.rows.every((r:any)=>check.rows.some((x:any)=>String(x.id)===String(r.id)&&String(x.status)===\"INELIGIBLE_GEOGRAPHY_BRAZIL\")) && stateCheck.rows.length===2;\nconst result = {pass, provider:storage.activeProvider, checkpointId, opencvMatched:opencvRows.rows, rows:check.rows};\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_ELIGIBILITY_INTEGRITY_V4_FAILED\");\nexport default result;",[338],"9be388c9-88f6-4d87-8e99-7a8b16403059","payana_bridge_selftest.ts","01a07f42-c11a-7588-86ec-19a8d68008c4",["D",1788841476385],"import { sqlite as control } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst id = \"payana_selftest_snapshot_v1\";\nawait control.execute(`CREATE TABLE IF NOT EXISTS vault_bridge_requests (\n id TEXT PRIMARY KEY,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n status TEXT NOT NULL,\n action TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n result_json TEXT,\n error TEXT,\n attempt_count INTEGER NOT NULL DEFAULT 0\n)`);\nawait control.execute({sql:`INSERT INTO vault_bridge_requests(id,created_at,updated_at,status,action,payload_json,result_json,error,attempt_count)\n VALUES(?,datetime('now'),datetime('now'),'PENDING','payana_snapshot','{\"limit\":20}',NULL,NULL,0)\n ON CONFLICT(id) DO UPDATE SET status='PENDING',action='payana_snapshot',payload_json='{\"limit\":20}',result_json=NULL,error=NULL,attempt_count=0,updated_at=datetime('now')`,args:[id]});\n\nconsole.log(JSON.stringify({queued:true,id,next:\"run vault_bridge.ts on payana-ledger-v1\"}));\nexport default {queued:true,id};\n",[346],"c70b1169-495e-406a-825a-adce5cf496cc","payana_bountybook_watch_cron.ts","01a07f42-c11a-7588-86ec-171acebbd09e",["D",1788841476385],"import watch from \"./payana_bountybook_watch.ts\";\n\nexport default async function (_interval: { lastRunAt?: Date }) {\n console.log(JSON.stringify({\n scheduler: \"payana_bountybook_watch\",\n watchStatus: watch?.status ?? \"UNKNOWN\",\n watchState: watch?.state ?? \"UNKNOWN\",\n checkedAt: watch?.checkedAt ?? null,\n }));\n return watch;\n}\n",[352],"eed12a4a-51e8-4935-9411-643ab2bd0f42","payana_bountybook_watch.ts","01a07f42-c11a-7588-86ec-113813b0c0c7",["D",1788841476385],"import { getActiveDatabase } from \"./lib/storage_provider.ts\";\n\ntype Job = Record;\nconst db = getActiveDatabase();\nconst API = \"https://api.bountybook.ai\";\nconst HOME = \"https://www.bountybook.ai/\";\nconst MAX_PAGES = 10;\nconst PAGE_SIZE = 100;\n\nfunction text(v: unknown, max = 500) {\n return typeof v === \"string\" ? v.replace(/\\s+/g, \" \").trim().slice(0, max) : \"\";\n}\nfunction finite(v: unknown, fallback = 0) {\n const n = Number(v);\n return Number.isFinite(n) ? n : fallback;\n}\nasync function fetchText(url: string, accept: string) {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 10_000);\n try {\n const r = await fetch(url, { method:\"GET\", headers:{ Accept:accept, \"User-Agent\":\"PayAna-ReadOnly-BountyBook-Watch/1.0\" }, signal:controller.signal });\n const body = await r.text();\n if (!r.ok) throw new Error(`HTTP_${r.status}_${new URL(url).hostname}`);\n return body;\n } finally { clearTimeout(timer); }\n}\nasync function fetchJson(url: string) {\n const raw = await fetchText(url, \"application/json\");\n try { return JSON.parse(raw); } catch { throw new Error(\"INVALID_JSON\"); }\n}\nasync function fetchAllOpen() {\n const first = await fetchJson(`${API}/jobs?status=open&limit=${PAGE_SIZE}&page=1`);\n if (!Array.isArray(first?.jobs) || !Number.isFinite(Number(first?.total)) || !Number.isFinite(Number(first?.totalPages))) throw new Error(\"INVALID_JOBS_SHAPE\");\n const totalPages = Math.max(1, Number(first.totalPages));\n const pagesRead = Math.min(totalPages, MAX_PAGES);\n const all: Job[] = [...first.jobs];\n for (let p=2; p<=pagesRead; p++) {\n const body = await fetchJson(`${API}/jobs?status=open&limit=${PAGE_SIZE}&page=${p}`);\n if (!Array.isArray(body?.jobs)) throw new Error(`INVALID_JOBS_PAGE_${p}`);\n all.push(...body.jobs);\n }\n return { reportedTotal:Number(first.total), totalPages, pagesRead, jobs:[...new Map(all.map(j=>[String(j.id),j])).values()] };\n}\nfunction homeOpenCount(html: string) {\n const normalized = html.replace(/<[^>]*>/g,\" \").replace(/ /g,\" \").replace(/\\s+/g,\" \");\n const m = normalized.match(/([0-9][0-9,]*)\\s+open/i);\n return m ? Number(m[1].replaceAll(\",\",\"\")) : null;\n}\nfunction compactJob(job: Job) {\n return {\n id:String(job.id ?? \"\"),\n title:text(job.title,180),\n budget_usdc:text(String(job.budget_usdc ?? \"\"),40),\n job_type:text(job.job_type,80),\n difficulty:text(job.difficulty,80),\n estimated_minutes:finite(job.estimated_minutes,0),\n contract_job_id:finite(job.contract_job_id,0),\n payout_status:text(job.payout_status,80),\n flagged:finite(job.flagged,0),\n created_at:finite(job.created_at,0),\n updated_at:finite(job.updated_at,0),\n };\n}\n\nconst checkedAt = new Date().toISOString();\nlet watch: any;\ntry {\n const [homeHtml, open, health] = await Promise.all([\n fetchText(HOME,\"text/html\"),\n fetchAllOpen(),\n fetchJson(`${API}/health`),\n ]);\n const jobs = open.jobs;\n const apiOpen = jobs.length;\n const pageComplete = open.totalPages <= MAX_PAGES && apiOpen === open.reportedTotal;\n const homeOpen = homeOpenCount(homeHtml);\n const contractPositive = jobs.filter(j=>finite(j.contract_job_id,0)>0 && !finite(j.flagged,0));\n const openBudget = jobs.reduce((sum,j)=>sum+finite(j.budget_usdc,0),0);\n const treasury = finite(health?.escrow?.treasury_usdc,NaN);\n const failedPayouts = finite(health?.escrow?.failed_payouts,0);\n const pendingPayouts = finite(health?.escrow?.pending_payouts,0);\n const topApiRows = [...jobs]\n .filter(j=>!finite(j.flagged,0))\n .sort((a,b)=>finite(b.budget_usdc,0)-finite(a.budget_usdc,0))\n .slice(0,10).map(compactJob);\n\n let state = \"SURFACE_DIVERGENCE_UNRESOLVED\";\n if (!pageComplete) state = \"PARTIAL_API_CENSUS\";\n else if ((homeOpen ?? 0) > 0 || contractPositive.length > 0) state = \"POTENTIAL_LIVE_OPEN_NEEDS_CASE_AUDIT\";\n else if (homeOpen === 0 && apiOpen > 0 && contractPositive.length === 0) state = \"API_OPEN_ROWS_NOT_ESCROW_VERIFIED\";\n else if (homeOpen === 0 && apiOpen === 0) state = \"NO_OPEN_BOUNTIES_CONFIRMED\";\n\n watch = {\n status:\"PASS\", checkedAt, state,\n homepageOpenCount:homeOpen,\n apiReportedOpen:open.reportedTotal,\n apiEnumeratedOpen:apiOpen,\n apiPages:open.totalPages,\n apiCensusComplete:pageComplete,\n contractJobIdPositive:contractPositive.length,\n openBudgetUsdc:Math.round(openBudget*100)/100,\n treasuryUsdc:Number.isFinite(treasury)?treasury:null,\n openBudgetToTreasuryRatio:Number.isFinite(treasury)&&treasury>0?Math.round((openBudget/treasury)*100)/100:null,\n failedPayouts,pendingPayouts,\n healthJobs:finite(health?.jobs,0),\n topApiRows,\n invariant:\"API_STATUS_OPEN != ESCROW_FUNDED_OPEN; FETCH_FAIL != ZERO_OPEN\",\n };\n\n const previous = await db.execute({sql:`SELECT value_json FROM payana_state WHERE key=? LIMIT 1`,args:[\"bountybook_watch\"]});\n let previousState:any=null;\n try { previousState = previous.rows.length ? JSON.parse(String((previous.rows[0] as any).value_json)) : null; } catch {}\n const changed = !previousState || previousState.state !== watch.state || previousState.homepageOpenCount !== watch.homepageOpenCount || previousState.apiReportedOpen !== watch.apiReportedOpen || previousState.contractJobIdPositive !== watch.contractJobIdPositive || previousState.treasuryUsdc !== watch.treasuryUsdc;\n\n const statements:any[] = [\n {sql:`INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args:[\"bountybook_watch\",JSON.stringify(watch),\"LIVE_RUNTIME_CENSUS\",`${HOME} + ${API}/jobs + ${API}/health`,checkedAt,checkedAt]},\n {sql:`UPDATE payana_opportunities SET status=?,currentness_at=?,evidence_state=?,source_ref=?,updated_at=? WHERE id='bountybook_current'`,\n args:[watch.state,checkedAt,\"LIVE_SURFACE_RECONCILED\",`${HOME} + ${API}/jobs + ${API}/health`,checkedAt]},\n ];\n if (changed) {\n const actionId = `bountybook-watch-change-${checkedAt.replace(/[^0-9]/g,\"\").slice(0,14)}`;\n statements.push({sql:`INSERT OR IGNORE INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[actionId,\"bountybook_current\",\"MONITOR_CHANGE\",\"PASS\",\"read_only\",\"NOT_REQUIRED\",1,\"BountyBook public read-only surfaces\",JSON.stringify({previous:previousState?{state:previousState.state,homepageOpenCount:previousState.homepageOpenCount,apiReportedOpen:previousState.apiReportedOpen,contractJobIdPositive:previousState.contractJobIdPositive,treasuryUsdc:previousState.treasuryUsdc}:null,current:{state:watch.state,homepageOpenCount:watch.homepageOpenCount,apiReportedOpen:watch.apiReportedOpen,contractJobIdPositive:watch.contractJobIdPositive,treasuryUsdc:watch.treasuryUsdc}}),null,checkedAt,checkedAt,\"LIVE_RUNTIME_CHANGE_RECEIPT\",checkedAt,checkedAt]});\n }\n await db.batch(statements);\n} catch (error) {\n const message = error instanceof Error ? error.message.slice(0,500) : String(error).slice(0,500);\n watch = {status:\"FAIL\",checkedAt,state:\"FETCH_FAIL\",error:message,invariant:\"FETCH_FAIL != ZERO_OPEN; last known opportunity state is preserved\"};\n await db.execute({sql:`INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,args:[\"bountybook_watch\",JSON.stringify(watch),\"FETCH_FAIL_PRESERVE_LAST_KNOWN\",\"BountyBook public surfaces\",checkedAt,checkedAt]});\n}\nconsole.log(JSON.stringify(watch));\nexport default watch;\n",[358],"d6601f7b-a4df-401f-ae70-5418155e9547","payana_binance_submission_ready_checkpoint.ts","01a07f42-c11a-7588-86ec-0f3d1500dcf2",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_binance_submission_ready_20260907_1936_brt\";\n\nconst submissionState = {\n status: \"TECHNICAL_PASS_DURABLE_BACKUP_PASS_HUMAN_ACCOUNT_GATES_ONLY\",\n productionVal: \"cleitoncosta/payana-binance-agent-os\",\n productionUrl: \"https://payana-agent-os.val.run/\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n finalTechnicalAudit: {\n pass: true,\n assertions: 189,\n mutationSteps: 35,\n total: 224,\n auditedAt: \"2026-09-07T22:31:20.817Z\",\n },\n concurrencyRegression: {\n failureClass: \"SQLITE_BUSY_CONCURRENT_OAUTH_STATE_CONSUMPTION\",\n control: \"ATOMIC_DELETE_RETURNING_PLUS_BOUNDED_BUSY_RETRY\",\n repeatedStorageRunsAfterFix: 5,\n result: \"PASS\",\n },\n productionPostFix: {\n health: \"PASS_200\",\n analyzeBTCUSDT: \"PASS_200_THREE_SOURCE_RECEIPTS\",\n pendingOauthStates: 0,\n },\n detachedBackup: {\n val: \"cleitoncosta/payana-agent-os-rc1-backup-20260907\",\n createdAt: \"2026-09-07T22:33:02.412Z\",\n independentAudit: \"224_CHECKS_PASS\",\n independentAuditAt: \"2026-09-07T22:33:24.118Z\",\n pendingOauthStates: 0,\n },\n submissionPackage: \"docs/SUBMISSION_PACKAGE.md\",\n officialDeadline: \"2026-09-08T23:59:00Z\",\n deadlineBrt: \"2026-09-08T20:59:00-03:00\",\n remainingGates: [\n \"Confirm eligibility/account conditions\",\n \"Complete supported-client Binance Agent OS MCP Market Data connection proof if feasible\",\n \"Record final demo/video\",\n \"Publish GitHub mirror only if desired/applicable\",\n \"Follow @Binance and repost official announcement\",\n \"Reply or quote-repost with Track A submission\",\n \"Complete official Binance survey\",\n \"Persist final external receipts/URLs in PayAna ledger\",\n ],\n prohibitedClaimsUntilReceipted: [\n \"MCP_SESSION_AUTHORIZED\",\n \"CIMD_ACCEPTED_BY_PROVIDER\",\n \"X_SUBMISSION_COMPLETE\",\n \"SURVEY_COMPLETE\",\n \"GITHUB_PUBLISHED\",\n \"ELIGIBILITY_CONFIRMED\",\n ],\n doNotRestartTechnicalBuild: true,\n};\n\nconst currentCheckpoint = {\n id: checkpointId,\n status: submissionState.status,\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n latestWorkstream: \"binance_agent_os_track_a_submission\",\n technicalRelease: \"payana-market-sentinel-1.2.0-rc1\",\n technicalReleaseState: \"PASS_224_PLUS_DETACHED_BACKUP_PASS\",\n nextAction: \"Do only external/human-account submission gates and record their receipts. Reopen technical code only if a new defect or requirement is proven.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_submission_package\", JSON.stringify(submissionState), \"VERIFIED_TECHNICAL_AND_BACKUP_EXTERNAL_GATES_OPEN\", \"cleitoncosta/payana-binance-agent-os@main:docs/SUBMISSION_PACKAGE.md\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(currentCheckpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n]);\n\nconst rows = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?) ORDER BY key\", args: [\"binance_submission_package\", \"current_checkpoint\"] });\nconst pass = storage.activeProvider === \"turso\" && rows.rows.length === 2;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: rows.rows };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_SUBMISSION_CHECKPOINT_FAILED\");\nexport default result;\n",[364],"8c69103d-c532-4ff2-9c2a-d246ca35375a","payana_binance_rule_checkpoint.ts","01a07f42-c11a-7588-86ec-0a9858e0b43a",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_binance_entry_rule_reconciled_20260907_1957_brt\";\nconst productionVal = \"cleitoncosta/payana-binance-agent-os\";\nconst finalFrozenVal = \"cleitoncosta/payana-agent-os-track-a-final-freeze-20260907\";\nconst manifestSha256 = \"fdad7858ce0999b9345f1c5dfd8fb236d9a1be4736a535b684a8cba53c6068da\";\n\nconst state = {\n status: \"TRACK_A_ENTRY_RULE_RECONCILED_TECHNICAL_PASS_EXTERNAL_ACCOUNT_GATES_ONLY\",\n production: {\n val: productionVal,\n demoUrl: \"https://payana-agent-os.val.run/\",\n submissionEvidenceUrl: \"https://payana-agent-os.val.run/api/submission-evidence\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n finalAudit: { pass: true, assertions: 189, mutationSteps: 35, total: 224, auditedAt: \"2026-09-07T22:55:59.539Z\" },\n manifestSha256,\n },\n canonicalFrozenBackup: {\n val: finalFrozenVal,\n createdAt: \"2026-09-07T22:56:16.128Z\",\n independentAudit: { pass: true, assertions: 189, mutationSteps: 35, total: 224, auditedAt: \"2026-09-07T22:56:29.213Z\" },\n databaseContentsCopied: false,\n },\n officialPublishedEntryRequirements: {\n deadlineUtc: \"2026-09-08T23:59:00Z\",\n deadlineBrt: \"2026-09-08T20:59:00-03:00\",\n followBinanceAndRepostAnnouncement: \"REQUIRED_UNVERIFIED\",\n replyOrQuoteWithSubmission: \"REQUIRED_UNVERIFIED\",\n surveyCompletion: \"REQUIRED_UNVERIFIED\",\n trackAArtifact: \"VIDEO_OR_DEMO\",\n liveDemoAlreadyAvailable: true,\n video: \"OPTIONAL_WHEN_DEMO_USED\",\n github: \"IF_APPLICABLE\",\n eligibility: \"UNVERIFIED\",\n },\n qualificationEvidence: {\n supportedClientAgentOsMcpMarketDataWitness: \"UNVERIFIED_HIGH_PRIORITY\",\n reason: \"Strongest remaining proof the Track A agent is actually using Binance Agent OS rather than only Binance public-data APIs.\",\n },\n binanceChatgptApp: {\n installedInChatGpt: true,\n officialDocumentationState: \"PUBLIC_READ_ONLY_MARKET_DATA_NO_AUTH_NO_ACCOUNT_NO_TRADING\",\n qualification: \"DOES_NOT_PROVE_AGENT_OS_MCP_SESSION\",\n callableNamespaceInCurrentHarness: \"NOT_SURFACED\",\n },\n browserQa: {\n status: \"BLOCKED_EXTERNAL_EXECUTION_CAPACITY\",\n tinyFish: \"WALLET_OUT_OF_FUNDS_BALANCE_-0.296_USD_MIN_TOPUP_10_USD\",\n firecrawl: \"INSUFFICIENT_CREDITS\",\n localChromium: \"ERR_BLOCKED_BY_ADMINISTRATOR_FOR_VAL_RUN\",\n consequence: \"INTERACTIVE_BROWSER_BEHAVIOR_PROOF_NOT_PROMOTED_TO_PASS\",\n },\n optionalEnhancements: [\"VIDEO_OR_SCREEN_RECORDING\", \"DEDICATED_GITHUB_MIRROR_IF_USEFUL\"],\n remainingHardOrQualificationGates: [\n \"PARTICIPANT_ACCOUNT_ELIGIBILITY\",\n \"SUPPORTED_CLIENT_AGENT_OS_MCP_MARKET_DATA_WITNESS\",\n \"X_FOLLOW_AND_REPOST\",\n \"X_TRACK_A_SUBMISSION\",\n \"BINANCE_SURVEY_COMPLETION\",\n ],\n doNotRestartTechnicalBuild: true,\n};\n\nconst checkpoint = {\n id: checkpointId,\n status: state.status,\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n latestWorkstream: \"binance_agent_os_track_a_external_submission_gates\",\n technicalRelease: state.production.release,\n productionAudit: \"224_PASS\",\n frozenBackupAudit: \"224_PASS\",\n trackAArtifactState: \"LIVE_DEMO_SATISFIES_VIDEO_OR_DEMO\",\n nextAction: \"Complete participant eligibility, supported-client Agent OS MCP Market Data witness, X follow/repost + Track A reply/quote, and survey; persist receipts. Video and GitHub are optional under published wording unless a live form proves otherwise.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_track_a_entry_rule_reconciled\", JSON.stringify(state), \"OFFICIAL_RULES_PLUS_FINAL_RUNTIME_AND_FROZEN_BACKUP\", \"https://www.binance.com/en/blog/community/8802181509900814931\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_agent_os_final_backup\", JSON.stringify(state.canonicalFrozenBackup), \"VERIFIED_DETACHED_BACKUP_RUNTIME_TESTED\", finalFrozenVal, now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_chatgpt_public_app\", JSON.stringify(state.binanceChatgptApp), \"OFFICIAL_DOCS_PLUS_PLUGIN_INSTALL_STATE\", \"https://developers.binance.com/en/docs/sdks-tools/integrations/chatgpt\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_browser_qa_gate\", JSON.stringify(state.browserQa), \"BLOCKED_NOT_PASS\", \"TinyFish+Firecrawl+local Chromium probes 2026-09-07\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(checkpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n {\n sql: `UPDATE payana_opportunities SET status=?, constraints_json=?, currentness_at=?, evidence_state=?, source_ref=?, updated_at=? WHERE id=?`,\n args: [\n \"ACTIVE_DEMO_READY_EXTERNAL_ACCOUNT_GATES_ONLY\",\n JSON.stringify([\n \"Deadline 2026-09-08T23:59:00Z\",\n \"Follow @Binance and repost official announcement\",\n \"Reply or quote-repost with Track A submission\",\n \"Complete official survey\",\n \"Track A artifact wording is video OR demo; live demo already exists\",\n \"GitHub is if applicable\",\n \"Participant/account eligibility must be proven\",\n \"Supported-client Agent OS MCP Market Data witness remains qualification-critical evidence\",\n \"No Trade/Account/Transfer needed for PayAna read-only workflow\",\n ]),\n now,\n \"OFFICIAL_RULES_PLUS_FINAL_RUNTIME_AND_FROZEN_BACKUP\",\n \"https://www.binance.com/en/blog/community/8802181509900814931\",\n now,\n \"binance_agent_os_2026\",\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,sha256=excluded.sha256,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-submission-manifest\", \"opportunity\", \"binance_agent_os_2026\", \"MACHINE_READABLE_SUBMISSION_MANIFEST\", state.production.submissionEvidenceUrl, manifestSha256, JSON.stringify({ manifestSha256, officialEntryRequirements: state.officialPublishedEntryRequirements, qualificationEvidence: state.qualificationEvidence }), \"VERIFIED_RUNTIME\", now, now, now],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-final-frozen-backup\", \"action\", \"binance_track_a_final_freeze\", \"CANONICAL_FINAL_FROZEN_VAL_RECEIPT\", finalFrozenVal, null, JSON.stringify(state.canonicalFrozenBackup), \"VERIFIED_RUNTIME\", now, now, now],\n },\n]);\n\nconst rows = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?,?,?,?) ORDER BY key\", args: [\"binance_track_a_entry_rule_reconciled\", \"binance_agent_os_final_backup\", \"binance_chatgpt_public_app\", \"binance_browser_qa_gate\", \"current_checkpoint\"] });\nconst opp = await db.execute({ sql: \"SELECT id,status,evidence_state,deadline_at FROM payana_opportunities WHERE id=?\", args: [\"binance_agent_os_2026\"] });\nconst receipt = await db.execute({ sql: \"SELECT id,verification_state,locator,sha256 FROM payana_receipts WHERE id=?\", args: [\"receipt-binance-submission-manifest\"] });\nconst pass = storage.activeProvider === \"turso\" && rows.rows.length === 5 && opp.rows.length === 1 && receipt.rows.length === 1;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: rows.rows, opportunity: opp.rows[0], receipt: receipt.rows[0] };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_ENTRY_RULE_RECONCILE_CHECKPOINT_FAILED\");\nexport default result;\n",[370],"58d0009f-4195-4436-a66a-c93706cc4e61","payana_binance_final_freeze_checkpoint.ts","01a07f42-c11a-7588-86ec-074275c18ea9",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_binance_track_a_freeze_20260907_1947_brt\";\nconst productionVal = \"cleitoncosta/payana-binance-agent-os\";\nconst frozenVal = \"cleitoncosta/payana-agent-os-track-a-frozen-20260907\";\nconst manifestSha256 = \"04e90a79de4f5c5f48029c6adc9b4120e769f2c68d338b92607691b903eea513\";\n\nconst freeze = {\n status: \"BINANCE_TRACK_A_TECHNICAL_FREEZE_PASS_EXTERNAL_HUMAN_GATES_ONLY\",\n productionVal,\n productionUrl: \"https://payana-agent-os.val.run/\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n finalMainAudit: {\n pass: true,\n assertions: 189,\n mutationSteps: 35,\n total: 224,\n auditedAt: \"2026-09-07T22:46:11.240Z\",\n pendingOauthStatesAfterAudit: 0,\n },\n frozenBackup: {\n val: frozenVal,\n createdAt: \"2026-09-07T22:46:30.625Z\",\n independentAudit: { pass: true, assertions: 189, mutationSteps: 35, total: 224, auditedAt: \"2026-09-07T22:46:46.781Z\" },\n pendingOauthStatesAfterAudit: 0,\n databaseContentsCopied: false,\n oauthAlternateRuntime: false,\n oauthNote: \"Detached code/schema backup only; OAuth client_id and redirect intentionally remain bound to canonical production payana-agent-os.val.run, so this backup is not an alternate live OAuth endpoint.\",\n },\n submissionEvidence: {\n url: \"https://payana-agent-os.val.run/api/submission-evidence\",\n schema: \"payana-submission-evidence-1.0.0\",\n manifestSha256,\n status: \"PASS\",\n },\n officialCurrentness: {\n checkedAt: \"2026-09-07\",\n deadlineUtc: \"2026-09-08T23:59:00Z\",\n deadlineBrt: \"2026-09-08T20:59:00-03:00\",\n hackathon: \"https://www.binance.com/en/blog/community/8802181509900814931\",\n agentOs: \"https://www.binance.com/en/agent-os\",\n mcpDocs: \"https://developers.binance.com/en/docs/agent-native/mcp-server/agentic\",\n marketDataCapability: \"PUBLIC_NO_AUTH_AT_CAPABILITY_LEVEL\",\n mcpConnectionObserved: \"AUTH_GATED\",\n participantEligibility: \"UNVERIFIED\",\n },\n remainingExternalGates: [\n \"PARTICIPANT_ACCOUNT_ELIGIBILITY\",\n \"SUPPORTED_CLIENT_MCP_MARKET_DATA_WITNESS\",\n \"FINAL_VIDEO\",\n \"X_FOLLOW_AND_REPOST\",\n \"X_TRACK_A_SUBMISSION\",\n \"BINANCE_SURVEY_COMPLETION\",\n ],\n doNotRestartTechnicalBuild: true,\n};\n\nconst currentCheckpoint = {\n id: checkpointId,\n status: freeze.status,\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n latestWorkstream: \"binance_agent_os_track_a_external_submission_gates\",\n technicalRelease: freeze.release,\n productionAudit: \"224_PASS\",\n detachedFrozenBackupAudit: \"224_PASS\",\n nextAction: \"Complete only external participant/MCP/video/X/survey gates and persist actual receipts. Reopen technical code only for a proven new defect or requirement.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_track_a_final_freeze\", JSON.stringify(freeze), \"VERIFIED_PRODUCTION_PLUS_INDEPENDENT_FROZEN_BACKUP\", productionVal, now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_agent_os_final_backup\", JSON.stringify(freeze.frozenBackup), \"VERIFIED_DETACHED_BACKUP_RUNTIME_TESTED\", frozenVal, now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_official_currentness_20260907\", JSON.stringify(freeze.officialCurrentness), \"OFFICIAL_DOCS_VERIFIED_WITH_ACCOUNT_GATE_OPEN\", freeze.officialCurrentness.hackathon, now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(currentCheckpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n {\n sql: `UPDATE payana_opportunities SET status=?, currentness_at=?, evidence_state=?, source_ref=?, updated_at=? WHERE id=?`,\n args: [\"ACTIVE_TECHNICAL_FROZEN_EXTERNAL_GATES_ONLY\", now, \"OFFICIAL_RULES_PLUS_FINAL_TECHNICAL_FREEZE\", freeze.officialCurrentness.hackathon, now, \"binance_agent_os_2026\"],\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\"binance_track_a_final_freeze\", \"binance_agent_os_2026\", \"TECHNICAL_FREEZE\", \"PASS\", \"LOW_READ_ONLY_BUILD\", \"USER_MISSION_PREAUTHORIZED_SAFE_TECHNICAL_WORK\", 1, \"Reconcile final production, submission evidence and detached backup before external submission gates.\", \"Production 224/224-equivalent checks PASS; OAuth pending states 0; frozen detached backup independently 224 PASS; machine-readable manifest PASS.\", \"receipt-binance-track-a-final-freeze\", \"2026-09-07T22:40:42.949Z\", \"2026-09-07T22:46:46.781Z\", \"VERIFIED_RUNTIME_AND_BACKUP\", now, now],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,sha256=excluded.sha256,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-submission-manifest\", \"opportunity\", \"binance_agent_os_2026\", \"MACHINE_READABLE_SUBMISSION_MANIFEST\", freeze.submissionEvidence.url, manifestSha256, JSON.stringify(freeze.submissionEvidence), \"VERIFIED_RUNTIME\", now, now, now],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-track-a-final-freeze\", \"action\", \"binance_track_a_final_freeze\", \"FINAL_TECHNICAL_FREEZE_RECEIPT\", productionVal, null, JSON.stringify({ productionAudit: freeze.finalMainAudit, frozenBackup: freeze.frozenBackup, manifestSha256 }), \"VERIFIED_RUNTIME_AND_BACKUP\", now, now, now],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-final-frozen-backup\", \"action\", \"binance_track_a_final_freeze\", \"DETACHED_FROZEN_VAL_RECEIPT\", frozenVal, null, JSON.stringify(freeze.frozenBackup), \"VERIFIED_RUNTIME\", now, now, now],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?,?,?) ORDER BY key\", args: [\"binance_track_a_final_freeze\", \"binance_agent_os_final_backup\", \"binance_official_currentness_20260907\", \"current_checkpoint\"] });\nconst receipts = await db.execute({ sql: \"SELECT id,verification_state,locator,sha256 FROM payana_receipts WHERE id IN (?,?,?) ORDER BY id\", args: [\"receipt-binance-submission-manifest\", \"receipt-binance-track-a-final-freeze\", \"receipt-binance-final-frozen-backup\"] });\nconst opp = await db.execute({ sql: \"SELECT id,status,evidence_state,deadline_at FROM payana_opportunities WHERE id=?\", args: [\"binance_agent_os_2026\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 4 && receipts.rows.length === 3 && opp.rows.length === 1;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: state.rows, receipts: receipts.rows, opportunity: opp.rows[0] };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_FINAL_FREEZE_CHECKPOINT_FAILED\");\nexport default result;\n",[376],"c0443a01-3e82-48cf-95fe-32978107cf9d","payana_binance_external_gates_v1.ts","01a07f42-c11a-7588-86ec-00dd3b02ea98",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\n\nconst gatePlan = {\n schema: \"payana-external-gates-1.0.0\",\n opportunityId: \"binance_agent_os_2026\",\n deadlineUtc: \"2026-09-08T23:59:00Z\",\n deadlineBrt: \"2026-09-08T20:59:00-03:00\",\n gates: {\n eligibility: {\n state: \"UNVERIFIED_HUMAN_ACCOUNT_GATE\",\n rule: \"Brazil is not explicitly named in the event page exclusion sentence, but logged-in participant/account eligibility must be proven.\",\n },\n agentOsMcpWitness: {\n state: \"UNVERIFIED_HUMAN_CLIENT_GATE\",\n exactWitnessPrompt: \"Use the Binance MCP Server to show the current BTCUSDT price and 24-hour change.\",\n requiredEvidence: [\"supported client name\", \"visible Binance MCP tool attribution\", \"live BTCUSDT result\", \"UTC timestamp\"],\n prohibitedEvidence: [\"password\", \"cookie\", \"OAuth code\", \"access token\", \"refresh token\", \"API key\", \"wallet secret\"],\n permissionTarget: \"MARKET_DATA_ONLY_FOR_PAYANA\",\n tradeScope: \"NOT_REQUIRED\",\n transferScope: \"NOT_REQUIRED\",\n },\n chatgptBinancePlugin: {\n state: \"AVAILABLE_NOT_CONFIRMED_INSTALLED\",\n capability: \"PUBLIC_READ_ONLY_BINANCE_MARKET_DATA\",\n boundary: \"CHATGPT_BINANCE_PLUGIN_AVAILABLE != AGENT_OS_MCP_WITNESS\",\n },\n video: {\n state: \"UNVERIFIED_HUMAN_RECORDING_GATE\",\n package: \"cleitoncosta/payana-binance-agent-os@main:docs/SUBMISSION_PACKAGE.md\",\n },\n github: {\n state: \"OPTIONAL_IF_APPLICABLE_NO_PAYANA_REPO_FOUND\",\n authenticatedOwner: \"AIA-design\",\n unrelatedOwnedReposMustRemainUntouched: true,\n currentConnectorRepoCreateAction: \"NOT_EXPOSED\",\n },\n xFollowRepost: { state: \"UNVERIFIED_EXTERNAL_ACCOUNT_GATE\" },\n xTrackASubmission: { state: \"UNVERIFIED_EXTERNAL_ACCOUNT_GATE\" },\n survey: {\n state: \"UNVERIFIED_EXTERNAL_ACCOUNT_GATE\",\n url: \"https://www.binance.com/en/survey/2913aa200aac462c89a737779393f3d4\",\n staticExtraction: \"NO_VISIBLE_FORM_FIELDS_EXTRACTED\",\n interactiveInspection: \"NOT_STARTED_TINYFISH_WALLET_OUT_OF_FUNDS\",\n tinyFishWalletBalanceObservedUsd: \"-0.296000\",\n tinyFishMinimumTopUpUsd: \"10.00\",\n },\n },\n stopRule: \"Never promote a gate to PASS without an external receipt or direct account/client witness.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_external_gate_execution_plan\", JSON.stringify(gatePlan), \"VERIFIED_RUNTIME_STATE_WITH_HUMAN_GATES_OPEN\", \"Binance official docs + connected tool census 2026-09-07\", now, now],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\"receipt-binance-external-gates-open\", \"opportunity\", \"binance_agent_os_2026\", \"EXTERNAL_GATE_STATE_RECEIPT\", gatePlan.gates.survey.url, null, JSON.stringify(gatePlan), \"PARTIAL_HUMAN_GATES_OPEN\", now, now, now],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state FROM payana_state WHERE key=?\", args: [\"binance_external_gate_execution_plan\"] });\nconst receipt = await db.execute({ sql: \"SELECT id,verification_state FROM payana_receipts WHERE id=?\", args: [\"receipt-binance-external-gates-open\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 1 && receipt.rows.length === 1;\nconst result = { pass, provider: storage.activeProvider, state: state.rows[0], receipt: receipt.rows[0] };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_EXTERNAL_GATE_PLAN_WRITE_FAILED\");\nexport default result;\n",[382],"22501f2c-f975-4ca8-abbd-51d2c742fe5a","payana_binance_checkpoint_v2.ts","01a07f42-c11a-7588-86eb-fe9f0611d954",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_binance_agent_os_20260907_1932_brt\";\n\nconst trackState = {\n workstream: \"Binance Agent OS Mini Hackathon — Track A\",\n status: \"TECHNICAL_RC_PASS_EXTERNAL_GATES_REMAIN\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n val: \"cleitoncosta/payana-binance-agent-os\",\n demoUrl: \"https://payana-agent-os.val.run/\",\n releaseAudit: {\n pass: true,\n assertions: 189,\n mutationSteps: 35,\n totalExecutedChecks: 224,\n auditedAt: \"2026-09-07T22:31:20.817Z\",\n concurrencyFix: \"OAUTH_STATE_CONSUME_ATOMIC_DELETE_RETURNING_SQLITE_BUSY_RETRY_PASS_5X\",\n },\n marketEvidence: {\n provider: \"Binance public Spot market-data surface via data-api.binance.vision\",\n liveProductionEvidence: \"PASS\",\n hardBoundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n },\n oauthMcp: {\n cimdUrl: \"https://payana-agent-os.val.run/oauth/client-metadata.json\",\n pkce: \"S256\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n stateTtlMinutes: 10,\n pendingStateCap: 500,\n unauthenticatedTransportProbe: {\n serverDiscover: \"HTTP_200_JSONRPC_METHOD_NOT_FOUND\",\n toolsList: \"HTTP_401_OAUTH_RESOURCE_METADATA\",\n conclusion: \"MCP_CONNECTION_AUTH_GATED\",\n },\n authorizationSurfaceProbe: {\n status: \"PARTIAL\",\n httpStatus: 202,\n blocker: \"BINANCE_JAVASCRIPT_ANTI_ROBOT_INTERSTITIAL\",\n invalidClientEvidenceObserved: false,\n },\n },\n externalGates: [\n \"Real Binance Agent OS MCP connection proof in a supported MCP client\",\n \"Final video/screen recording\",\n \"GitHub mirror if used/applicable\",\n \"Follow/repost and Track A X submission\",\n \"Official Binance survey completion\",\n \"Eligibility/account conditions confirmation\",\n ],\n doNotRestart: true,\n};\n\nconst currentCheckpoint = {\n id: checkpointId,\n status: \"DURABLE_RECOVERY_PASS_WITH_BINANCE_RC1_AND_OPEN_EXTERNAL_GATES\",\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n latestWorkstream: \"binance_agent_os_track_a\",\n nextAction: \"Complete only remaining external/human proof gates; do not rebuild the technical RC from scratch.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_agent_os_track_a\", JSON.stringify(trackState), \"VERIFIED_LIVE_RC_EXTERNAL_GATES_OPEN\", \"cleitoncosta/payana-binance-agent-os@main\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(currentCheckpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n {\n sql: `UPDATE payana_opportunities SET url=?,status=?,constraints_json=?,currentness_at=?,evidence_state=?,source_ref=?,updated_at=? WHERE id=?`,\n args: [\n \"https://www.binance.com/en/blog/community/8802181509900814931\",\n \"ACTIVE_TECHNICAL_RC_READY_EXTERNAL_GATES\",\n JSON.stringify([\n \"Track A deadline 2026-09-08T23:59:00Z\",\n \"Video or demo plus GitHub if applicable\",\n \"Follow @Binance and repost official announcement\",\n \"Reply or quote-repost with Track A submission\",\n \"Complete official survey\",\n \"Eligibility/account/regional conditions must be confirmed\",\n \"PayAna demo must remain read-only; Account/Trade/Transfer not required\",\n ]),\n now,\n \"OFFICIAL_RULES_PLUS_VERIFIED_LIVE_RC\",\n \"Binance official hackathon announcement + PayAna Val Town runtime\",\n now,\n \"binance_agent_os_2026\",\n ],\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\n \"binance_agent_os_rc1_release_audit\",\n \"binance_agent_os_2026\",\n \"TECHNICAL_RELEASE_AUDIT\",\n \"PASS\",\n \"LOW_READ_ONLY_BUILD\",\n \"USER_MISSION_PREAUTHORIZED_SAFE_TECHNICAL_WORK\",\n 1,\n \"Harden and falsify PayAna Track A technical candidate without trading/account authority.\",\n \"1.2.0-rc1 live; 189 assertions + 35 rate-limit mutation steps = 224 PASS. OAuth/CIMD/PKCE and state replay controls added. Reproduced SQLITE_BUSY race fixed with atomic DELETE RETURNING + bounded busy retry; OAuth-state concurrency passed 5 consecutive executions. No automatic MCP tool call.\",\n \"receipt-binance-agent-os-rc1\",\n \"2026-09-07T20:48:00Z\",\n \"2026-09-07T22:31:20.817Z\",\n \"VERIFIED_RUNTIME_TESTS\",\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-rc1\",\n \"action\",\n \"binance_agent_os_rc1_release_audit\",\n \"LIVE_RUNTIME_RELEASE_RECEIPT\",\n \"https://payana-agent-os.val.run/\",\n null,\n JSON.stringify({\n release: \"1.2.0-rc1\",\n checks: { assertions: 189, mutationSteps: 35, total: 224, pass: true },\n productionHealth: \"PASS\",\n productionAnalyzeBTCUSDT: \"PASS_3_OF_3_SOURCES_AT_POST_MERGE_CHECKPOINT\",\n oauthStatus: \"READY_FOR_USER_AUTHORIZATION\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n pendingOAuthStatesAfterTests: 0,\n }),\n \"VERIFIED_RUNTIME\",\n now,\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-provider-gate\",\n \"opportunity\",\n \"binance_agent_os_2026\",\n \"EXTERNAL_PROVIDER_GATE\",\n \"https://accounts.binance.com/agentic-oauth/authorize\",\n null,\n JSON.stringify({\n authorizationSurfaceProbe: \"HTTP_202_JS_ANTI_ROBOT_INTERSTITIAL\",\n invalidClientLikeErrorObserved: false,\n cimdAcceptance: \"UNVERIFIED\",\n realMcpConnection: \"UNVERIFIED\",\n classification: \"PARTIAL_EXTERNAL_HUMAN_BROWSER_GATE\",\n }),\n \"PARTIAL_EXTERNAL_GATE\",\n now,\n now,\n now,\n ],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?) ORDER BY key\", args: [\"binance_agent_os_track_a\", \"current_checkpoint\"] });\nconst opp = await db.execute({ sql: \"SELECT id,status,evidence_state,deadline_at FROM payana_opportunities WHERE id=?\", args: [\"binance_agent_os_2026\"] });\nconst receipts = await db.execute({ sql: \"SELECT id,verification_state FROM payana_receipts WHERE id IN (?,?) ORDER BY id\", args: [\"receipt-binance-agent-os-rc1\", \"receipt-binance-agent-os-provider-gate\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 2 && opp.rows.length === 1 && receipts.rows.length === 2;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: state.rows, opportunity: opp.rows[0], receipts: receipts.rows };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_CHECKPOINT_WRITE_FAILED\");\nexport default result;\n",[388],"8f626af9-331e-4c9b-b849-11dca5e951dd","payana_binance_checkpoint_v1.ts","01a07f42-c11a-7588-86eb-fb80618ee6a5",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst checkpointId = \"cp_payana_binance_agent_os_20260907_1926_brt\";\n\nconst trackState = {\n workstream: \"Binance Agent OS Mini Hackathon — Track A\",\n status: \"TECHNICAL_RC_PASS_EXTERNAL_GATES_REMAIN\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n val: \"cleitoncosta/payana-binance-agent-os\",\n demoUrl: \"https://payana-agent-os.val.run/\",\n releaseAudit: {\n pass: true,\n assertions: 189,\n mutationSteps: 35,\n totalExecutedChecks: 224,\n auditedAt: \"2026-09-07T22:22:43.433Z\",\n },\n marketEvidence: {\n provider: \"Binance public Spot market-data surface via data-api.binance.vision\",\n liveProductionEvidence: \"PASS\",\n hardBoundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n },\n oauthMcp: {\n cimdUrl: \"https://payana-agent-os.val.run/oauth/client-metadata.json\",\n pkce: \"S256\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n stateTtlMinutes: 10,\n pendingStateCap: 500,\n unauthenticatedTransportProbe: {\n serverDiscover: \"HTTP_200_JSONRPC_METHOD_NOT_FOUND\",\n toolsList: \"HTTP_401_OAUTH_RESOURCE_METADATA\",\n conclusion: \"MCP_CONNECTION_AUTH_GATED\",\n },\n authorizationSurfaceProbe: {\n status: \"PARTIAL\",\n httpStatus: 202,\n blocker: \"BINANCE_JAVASCRIPT_ANTI_ROBOT_INTERSTITIAL\",\n invalidClientEvidenceObserved: false,\n },\n },\n externalGates: [\n \"Real Binance Agent OS MCP connection proof in a supported MCP client\",\n \"Final video/screen recording\",\n \"GitHub mirror if used/applicable\",\n \"Follow/repost and Track A X submission\",\n \"Official Binance survey completion\",\n \"Eligibility/account conditions confirmation\",\n ],\n doNotRestart: true,\n};\n\nconst currentCheckpoint = {\n id: checkpointId,\n status: \"DURABLE_RECOVERY_PASS_WITH_BINANCE_RC1_AND_OPEN_EXTERNAL_GATES\",\n doNotRestart: true,\n firstRevenueEvent: \"REV-000001\",\n firstRevenueProvenanceState: \"USER_CONFIRMED_RECEIPT_UNVERIFIED\",\n latestWorkstream: \"binance_agent_os_track_a\",\n nextAction: \"Complete only remaining external/human proof gates; do not rebuild the technical RC from scratch.\",\n};\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"binance_agent_os_track_a\", JSON.stringify(trackState), \"VERIFIED_LIVE_RC_EXTERNAL_GATES_OPEN\", \"cleitoncosta/payana-binance-agent-os@main\", now, now],\n },\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\"current_checkpoint\", JSON.stringify(currentCheckpoint), \"VERIFIED_DURABLE_CHECKPOINT\", checkpointId, now, now],\n },\n {\n sql: `UPDATE payana_opportunities SET url=?,status=?,constraints_json=?,currentness_at=?,evidence_state=?,source_ref=?,updated_at=? WHERE id=?`,\n args: [\n \"https://www.binance.com/en/blog/community/8802181509900814931\",\n \"ACTIVE_TECHNICAL_RC_READY_EXTERNAL_GATES\",\n JSON.stringify([\n \"Track A deadline 2026-09-08T23:59:00Z\",\n \"Video or demo plus GitHub if applicable\",\n \"Follow @Binance and repost official announcement\",\n \"Reply or quote-repost with Track A submission\",\n \"Complete official survey\",\n \"Eligibility/account/regional conditions must be confirmed\",\n \"PayAna demo must remain read-only; Account/Trade/Transfer not required\",\n ]),\n now,\n \"OFFICIAL_RULES_PLUS_VERIFIED_LIVE_RC\",\n \"Binance official hackathon announcement + PayAna Val Town runtime\",\n now,\n \"binance_agent_os_2026\",\n ],\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\n \"binance_agent_os_rc1_release_audit\",\n \"binance_agent_os_2026\",\n \"TECHNICAL_RELEASE_AUDIT\",\n \"PASS\",\n \"LOW_READ_ONLY_BUILD\",\n \"USER_MISSION_PREAUTHORIZED_SAFE_TECHNICAL_WORK\",\n 1,\n \"Harden and falsify PayAna Track A technical candidate without trading/account authority.\",\n \"1.2.0-rc1 live; 189 assertions + 35 rate-limit mutation steps = 224 PASS. OAuth/CIMD/PKCE and state replay controls added. No automatic MCP tool call.\",\n \"receipt-binance-agent-os-rc1\",\n \"2026-09-07T20:48:00Z\",\n \"2026-09-07T22:22:43.433Z\",\n \"VERIFIED_RUNTIME_TESTS\",\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-rc1\",\n \"action\",\n \"binance_agent_os_rc1_release_audit\",\n \"LIVE_RUNTIME_RELEASE_RECEIPT\",\n \"https://payana-agent-os.val.run/\",\n null,\n JSON.stringify({\n release: \"1.2.0-rc1\",\n checks: { assertions: 189, mutationSteps: 35, total: 224, pass: true },\n productionHealth: \"PASS\",\n productionAnalyzeBTCUSDT: \"PASS_3_OF_3_SOURCES_AT_POST_MERGE_CHECKPOINT\",\n oauthStatus: \"READY_FOR_USER_AUTHORIZATION\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n pendingOAuthStatesAfterTests: 0,\n }),\n \"VERIFIED_RUNTIME\",\n now,\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-provider-gate\",\n \"opportunity\",\n \"binance_agent_os_2026\",\n \"EXTERNAL_PROVIDER_GATE\",\n \"https://accounts.binance.com/agentic-oauth/authorize\",\n null,\n JSON.stringify({\n authorizationSurfaceProbe: \"HTTP_202_JS_ANTI_ROBOT_INTERSTITIAL\",\n invalidClientLikeErrorObserved: false,\n cimdAcceptance: \"UNVERIFIED\",\n realMcpConnection: \"UNVERIFIED\",\n classification: \"PARTIAL_EXTERNAL_HUMAN_BROWSER_GATE\",\n }),\n \"PARTIAL_EXTERNAL_GATE\",\n now,\n now,\n now,\n ],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key IN (?,?) ORDER BY key\", args: [\"binance_agent_os_track_a\", \"current_checkpoint\"] });\nconst opp = await db.execute({ sql: \"SELECT id,status,evidence_state,deadline_at FROM payana_opportunities WHERE id=?\", args: [\"binance_agent_os_2026\"] });\nconst receipts = await db.execute({ sql: \"SELECT id,verification_state FROM payana_receipts WHERE id IN (?,?) ORDER BY id\", args: [\"receipt-binance-agent-os-rc1\", \"receipt-binance-agent-os-provider-gate\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 2 && opp.rows.length === 1 && receipts.rows.length === 2;\nconst result = { pass, checkpointId, provider: storage.activeProvider, state: state.rows, opportunity: opp.rows[0], receipts: receipts.rows };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_CHECKPOINT_WRITE_FAILED\");\nexport default result;\n",[394],"237c9f2d-3949-41d3-badf-f45d3c231607","payana_binance_backup_receipt_v1.ts","01a07f42-c119-76ab-87e1-c14e0252748a",["D",1788841476385],"import { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\n\nconst db = getActiveDatabase();\nconst storage = getStorageState();\nconst now = new Date().toISOString();\nconst backupVal = \"cleitoncosta/payana-agent-os-rc1-backup-20260907\";\n\nawait db.batch([\n {\n sql: `INSERT INTO payana_state(key,value_json,evidence_state,source_ref,created_at,updated_at) VALUES(?,?,?,?,?,?)\n ON CONFLICT(key) DO UPDATE SET value_json=excluded.value_json,evidence_state=excluded.evidence_state,source_ref=excluded.source_ref,updated_at=excluded.updated_at`,\n args: [\n \"binance_agent_os_backup\",\n JSON.stringify({\n sourceVal: \"cleitoncosta/payana-binance-agent-os\",\n sourceBranch: \"main\",\n backupVal,\n createdAt: \"2026-09-07T22:33:02.412Z\",\n copyDatabaseContents: false,\n codeFilesCopied: true,\n backupReleaseAudit: { pass: true, assertions: 189, mutationSteps: 35, total: 224, auditedAt: \"2026-09-07T22:33:24.118Z\" },\n backupPendingOauthStatesAfterAudit: 0,\n note: \"Detached code/schema backup. Canonical OAuth client_id and redirect intentionally remain bound to production payana-agent-os.val.run.\",\n }),\n \"VERIFIED_DETACHED_BACKUP_RUNTIME_TESTED\",\n backupVal,\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_actions(id,opportunity_id,action_type,status,risk_class,approval_state,reversible,input_summary,output_summary,receipt_id,started_at,finished_at,evidence_state,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET status=excluded.status,output_summary=excluded.output_summary,receipt_id=excluded.receipt_id,finished_at=excluded.finished_at,evidence_state=excluded.evidence_state,updated_at=excluded.updated_at`,\n args: [\n \"binance_agent_os_detached_backup\",\n \"binance_agent_os_2026\",\n \"DETACHED_BACKUP\",\n \"PASS\",\n \"LOW_REVERSIBLE_COPY\",\n \"USER_MISSION_PREAUTHORIZED_SAFE_TECHNICAL_WORK\",\n 1,\n \"Create detached Val Town backup after concurrency fix and passing release audit.\",\n \"Backup val created and independently ran the full 224-check release audit PASS; pending OAuth states = 0.\",\n \"receipt-binance-agent-os-backup\",\n \"2026-09-07T22:33:02.412Z\",\n \"2026-09-07T22:33:24.118Z\",\n \"VERIFIED_RUNTIME_TESTS\",\n now,\n now,\n ],\n },\n {\n sql: `INSERT INTO payana_receipts(id,subject_type,subject_id,receipt_type,locator,sha256,payload_json,verification_state,verified_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET locator=excluded.locator,payload_json=excluded.payload_json,verification_state=excluded.verification_state,verified_at=excluded.verified_at,updated_at=excluded.updated_at`,\n args: [\n \"receipt-binance-agent-os-backup\",\n \"action\",\n \"binance_agent_os_detached_backup\",\n \"DETACHED_VAL_BACKUP_RECEIPT\",\n backupVal,\n null,\n JSON.stringify({\n source: \"cleitoncosta/payana-binance-agent-os@main\",\n backup: backupVal,\n releaseAudit: \"224_CHECKS_PASS\",\n oauthPendingStates: 0,\n databaseContentsCopied: false,\n tokenOrSecretCopied: false,\n }),\n \"VERIFIED_RUNTIME\",\n now,\n now,\n now,\n ],\n },\n]);\n\nconst state = await db.execute({ sql: \"SELECT key,evidence_state,source_ref FROM payana_state WHERE key=?\", args: [\"binance_agent_os_backup\"] });\nconst receipt = await db.execute({ sql: \"SELECT id,verification_state,locator FROM payana_receipts WHERE id=?\", args: [\"receipt-binance-agent-os-backup\"] });\nconst pass = storage.activeProvider === \"turso\" && state.rows.length === 1 && receipt.rows.length === 1;\nconst result = { pass, provider: storage.activeProvider, state: state.rows[0], receipt: receipt.rows[0] };\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"PAYANA_BINANCE_BACKUP_RECEIPT_FAILED\");\nexport default result;\n",[400],"293dc082-0b61-435b-92d9-6815d59e8067","index.ts","01a07f42-c119-76ab-87e1-bfa42b96a177",["D",1788841476385],"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { Hono } from \"npm:hono@4\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst OWNER = \"cleitoncosta\";\nconst APP_VERSION = \"0.7.0\";\nconst storageState = getStorageState();\nconst sqlite = getActiveDatabase();\nconst VAULT_BUDGET_BYTES = storageState.activeProvider === \"turso\" ? 4_000_000_000 : 8_000_000;\nconst MAX_CONVERSATION_CHARS = 600_000;\nconst MAX_MESSAGE_CHARS = 180_000;\nconst MAX_MESSAGES_PER_CONVERSATION = 5000;\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_knowledge_items (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n kind TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n tags_json TEXT NOT NULL DEFAULT '[]',\n entities_json TEXT NOT NULL DEFAULT '[]',\n source_type TEXT,\n source_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'KNOWLEDGE',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_knowledge_project_kind ON vault_knowledge_items(project, kind, updated_at)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_knowledge_fts USING fts5(\n knowledge_id UNINDEXED,\n project,\n kind,\n title,\n body,\n tags,\n entities,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_relations (\n id TEXT PRIMARY KEY,\n source_type TEXT NOT NULL,\n source_id TEXT NOT NULL,\n relation TEXT NOT NULL,\n target_type TEXT NOT NULL,\n target_id TEXT NOT NULL,\n weight REAL NOT NULL DEFAULT 1.0,\n provenance TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n UNIQUE(source_type, source_id, relation, target_type, target_id)\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_source ON vault_relations(source_type, source_id)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_target ON vault_relations(target_type, target_id)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_import_runs (\n id TEXT PRIMARY KEY,\n source_fingerprint TEXT NOT NULL,\n source_name TEXT NOT NULL,\n source_size INTEGER NOT NULL DEFAULT 0,\n total_candidates INTEGER NOT NULL DEFAULT 0,\n cursor INTEGER NOT NULL DEFAULT 0,\n imported_count INTEGER NOT NULL DEFAULT 0,\n indexed_messages INTEGER NOT NULL DEFAULT 0,\n skipped_count INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'IN_PROGRESS',\n inventory_json TEXT NOT NULL DEFAULT '{}',\n last_error TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_import_runs_updated ON vault_import_runs(updated_at DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute({\n sql: \"INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version', ?, datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at\",\n args: [APP_VERSION],\n });\n schemaReady = true;\n}\n\nasync function sessionFor(req: Request) {\n return await getOAuthUserData(req);\n}\n\nasync function isOwner(req: Request) {\n const session = await sessionFor(req);\n return session?.user?.username === OWNER ? session : null;\n}\n\nasync function requireOwner(c: any) {\n const session = await isOwner(c.req.raw);\n if (!session) return c.json({ error: \"unauthorized\", login: \"/auth/login\" }, 401);\n return null;\n}\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_-]{1,160}$/.test(value);\n}\n\nfunction safeProject(value: unknown) {\n return typeof value === \"string\" && value.trim().length >= 1 && value.trim().length <= 120;\n}\n\nfunction num(value: unknown) {\n return typeof value === \"number\" && Number.isFinite(value) ? value : null;\n}\n\nfunction int(value: unknown, fallback = 0) {\n return typeof value === \"number\" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : fallback;\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 8) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction legacySnippet(text: string, needle: string) {\n const normalized = text.toLocaleLowerCase(\"pt-BR\");\n const hit = normalized.indexOf(needle.toLocaleLowerCase(\"pt-BR\"));\n const start = hit >= 0 ? Math.max(0, hit - 180) : 0;\n const chunk = text.slice(start, start + 620).replace(/\\s+/g, \" \").trim();\n return `${start > 0 ? \"…\" : \"\"}${chunk}${start + 620 < text.length ? \"…\" : \"\"}`;\n}\n\nasync function searchCheckpointIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id AS id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\nasync function searchKnowledgeIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n knowledge_id AS id,\n project,\n kind,\n title,\n snippet(vault_knowledge_fts, 4, '', '', ' … ', 42) AS snippet,\n bm25(vault_knowledge_fts, 0.0, 2.0, 2.0, 5.0, 3.0, 1.5, 1.5) AS rank\n FROM vault_knowledge_fts\n WHERE vault_knowledge_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\napp.get(\"/\", async (c) => {\n const session = await sessionFor(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (session.user.username !== OWNER) return c.text(\"Acesso negado. Este cofre pertence a outro usuário.\", 403);\n return c.html(Root());\n});\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/me\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const session = await sessionFor(c.req.raw);\n return c.json({\n owner: OWNER,\n username: session?.user?.username,\n version: APP_VERSION,\n openaiApiUsed: false,\n storage: storageState.activeProvider === \"turso\" ? \"Turso/libSQL + FTS5\" : \"Val Town project-scoped SQLite + FTS5\",\n activeStorageProvider: storageState.activeProvider,\n externalStorageConfigured: storageState.externalConfigured,\n migrationMode: storageState.migrationMode,\n searchEngine: \"SQLite/libSQL FTS5/BM25\",\n budgetBytes: VAULT_BUDGET_BYTES,\n maxConversationChars: MAX_CONVERSATION_CHARS,\n });\n});\n\napp.get(\"/api/stats\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const [conversations, indexed, checkpoints, knowledge, relations] = await Promise.all([\n sqlite.execute(`SELECT\n COUNT(*) AS conversations,\n COALESCE(SUM(message_count), 0) AS messages,\n COALESCE(SUM(char_count), 0) AS chars,\n COALESCE(SUM(content_bytes), 0) AS bytes,\n MIN(create_time) AS earliest,\n MAX(update_time) AS latest,\n COALESCE(SUM(CASE WHEN truncated = 1 THEN 1 ELSE 0 END), 0) AS truncated\n FROM conversations`),\n sqlite.execute(\"SELECT COUNT(*) AS indexed_messages FROM vault_messages\"),\n sqlite.execute(\"SELECT COUNT(*) AS checkpoints FROM vault_checkpoints\"),\n sqlite.execute(\"SELECT COUNT(*) AS knowledge_items FROM vault_knowledge_items\"),\n sqlite.execute(\"SELECT COUNT(*) AS relations FROM vault_relations\"),\n ]);\n return c.json({\n ...(conversations.rows[0] ?? {}),\n indexedMessages: Number((indexed.rows[0] as any)?.indexed_messages ?? 0),\n checkpoints: Number((checkpoints.rows[0] as any)?.checkpoints ?? 0),\n knowledgeItems: Number((knowledge.rows[0] as any)?.knowledge_items ?? 0),\n relations: Number((relations.rows[0] as any)?.relations ?? 0),\n budgetBytes: VAULT_BUDGET_BYTES,\n });\n});\n\napp.get(\"/api/search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n if (q.length < 2) return c.json({ query: q, engine: \"none\", results: [] });\n\n const match = ftsQuery(q);\n const indexedCount = await sqlite.execute(\"SELECT COUNT(*) AS count FROM vault_messages\");\n const hasMessageIndex = Number((indexedCount.rows[0] as any)?.count ?? 0) > 0;\n\n if (match && hasMessageIndex) {\n const result = await sqlite.execute({\n sql: `WITH hits AS (\n SELECT\n conversation_id,\n message_id,\n role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_messages_fts, 6.0, 0.0, 2.5, 0.0, 1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 150\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn\n FROM hits\n )\n SELECT\n c.id, c.title, c.create_time, c.update_time, c.message_count, c.char_count,\n c.content_bytes, c.truncated, b.message_id, b.role, b.hit_snippet, b.rank\n FROM best b\n JOIN conversations c ON c.id = b.conversation_id\n WHERE b.rn = 1\n ORDER BY b.rank, c.update_time DESC\n LIMIT 25`,\n args: [match],\n });\n return c.json({\n query: q,\n engine: \"fts5_bm25\",\n match,\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n messageId: row.message_id,\n role: row.role,\n rank: row.rank,\n snippet: String(row.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(),\n })),\n });\n }\n\n const terms = q.split(/\\s+/).filter(Boolean).slice(0, 6);\n const clauses = terms.map(() => \"(title LIKE ? OR content_text LIKE ?)\");\n const args: string[] = [];\n for (const term of terms) {\n const pattern = `%${term}%`;\n args.push(pattern, pattern);\n }\n const result = await sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes, truncated, content_text\n FROM conversations\n WHERE ${clauses.join(\" AND \")}\n ORDER BY update_time DESC\n LIMIT 25`,\n args,\n });\n return c.json({\n query: q,\n engine: \"legacy_like_fallback\",\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n snippet: legacySnippet(String(row.content_text ?? \"\"), terms[0] ?? q),\n })),\n });\n});\n\napp.get(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const [conversation, messages] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n FROM conversations WHERE id = ? LIMIT 1`,\n args: [id],\n }),\n sqlite.execute({\n sql: `SELECT id, seq, role, create_time, content_text, char_count, content_bytes\n FROM vault_messages WHERE conversation_id = ? ORDER BY seq ASC`,\n args: [id],\n }),\n ]);\n if (!conversation.rows.length) return c.json({ error: \"not_found\" }, 404);\n return c.json({ ...(conversation.rows[0] as any), indexed_messages: messages.rows });\n});\n\napp.put(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 300) : \"Sem título\";\n const contentText = typeof body.contentText === \"string\" ? body.contentText : \"\";\n if (!contentText.trim()) return c.json({ error: \"empty_conversation\" }, 400);\n if (contentText.length > MAX_CONVERSATION_CHARS) {\n return c.json({ error: \"conversation_too_large\", maxChars: MAX_CONVERSATION_CHARS }, 413);\n }\n\n let importRun: null | { id: string; fingerprint: string; total: number; cursorAfter: number; skippedCount: number } = null;\n if (body.importRun != null) {\n const raw = body.importRun;\n const runId = typeof raw?.id === \"string\" ? raw.id.trim() : \"\";\n const fingerprint = typeof raw?.sourceFingerprint === \"string\" ? raw.sourceFingerprint.trim().toLowerCase() : \"\";\n const total = Math.min(1_000_000, int(raw?.totalCandidates));\n const cursorAfter = Math.min(total, int(raw?.cursorAfter));\n const skippedCount = Math.min(cursorAfter, int(raw?.skippedCount));\n if (!safeId(runId) || !/^[a-f0-9]{64}$/.test(fingerprint) || total < 1 || cursorAfter < 1 || skippedCount >= cursorAfter) {\n return c.json({ error: \"invalid_import_run_progress\" }, 400);\n }\n const run = await sqlite.execute({\n sql: \"SELECT source_fingerprint,total_candidates FROM vault_import_runs WHERE id=? LIMIT 1\",\n args: [runId],\n });\n if (!run.rows.length) return c.json({ error: \"import_run_not_initialized\" }, 409);\n const row: any = run.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n importRun = { id: runId, fingerprint, total, cursorAfter, skippedCount };\n }\n\n const rawMessages = Array.isArray(body.messages) ? body.messages.slice(0, MAX_MESSAGES_PER_CONVERSATION) : [];\n const normalizedMessages = rawMessages.flatMap((message: any, index: number) => {\n const text = typeof message?.contentText === \"string\" ? message.contentText.trim() : \"\";\n if (!text) return [];\n const clipped = text.slice(0, MAX_MESSAGE_CHARS);\n let messageId = typeof message?.id === \"string\" ? message.id.trim() : \"\";\n if (!safeId(messageId)) messageId = `${id}_m_${index + 1}`.slice(0, 160);\n return [{\n id: messageId,\n seq: index,\n role: typeof message?.role === \"string\" ? message.role.toLowerCase().slice(0, 40) : \"unknown\",\n createTime: typeof message?.createTime === \"number\" && Number.isFinite(message.createTime) ? message.createTime : null,\n contentText: clipped,\n charCount: clipped.length,\n contentBytes: new TextEncoder().encode(clipped).length,\n }];\n });\n\n const contentBytes = new TextEncoder().encode(contentText).length;\n const current = await sqlite.execute({ sql: \"SELECT content_bytes FROM conversations WHERE id = ? LIMIT 1\", args: [id] });\n const currentBytes = Number((current.rows[0] as any)?.content_bytes ?? 0);\n const totals = await sqlite.execute(\"SELECT COALESCE(SUM(content_bytes), 0) AS bytes FROM conversations\");\n const usedBytes = Number((totals.rows[0] as any)?.bytes ?? 0);\n const projected = usedBytes - currentBytes + contentBytes;\n if (projected > VAULT_BUDGET_BYTES) {\n return c.json({ error: \"vault_budget_exceeded\", usedBytes, projectedBytes: projected, budgetBytes: VAULT_BUDGET_BYTES }, 507);\n }\n\n const importedAt = new Date().toISOString();\n const statements: Array<{ sql: string; args?: Array }> = [\n {\n sql: `INSERT INTO conversations (\n id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n title = excluded.title,\n create_time = excluded.create_time,\n update_time = excluded.update_time,\n message_count = excluded.message_count,\n char_count = excluded.char_count,\n content_bytes = excluded.content_bytes,\n content_text = excluded.content_text,\n truncated = excluded.truncated,\n source_file = excluded.source_file,\n imported_at = excluded.imported_at`,\n args: [\n id,\n title || \"Sem título\",\n num(body.createTime),\n num(body.updateTime),\n normalizedMessages.length || int(body.messageCount),\n contentText.length,\n contentBytes,\n contentText,\n body.truncated ? 1 : 0,\n typeof body.sourceFile === \"string\" ? body.sourceFile.slice(0, 180) : \"conversations.json\",\n importedAt,\n ],\n },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n ];\n\n for (const message of normalizedMessages) {\n statements.push({\n sql: `INSERT INTO vault_messages (\n id, conversation_id, seq, role, create_time, content_text, char_count, content_bytes, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [message.id, id, message.seq, message.role, message.createTime, message.contentText, message.charCount, message.contentBytes, importedAt],\n });\n statements.push({\n sql: \"INSERT INTO vault_messages_fts(message_id, conversation_id, title, role, content) VALUES (?, ?, ?, ?, ?)\",\n args: [message.id, id, title || \"Sem título\", message.role, message.contentText],\n });\n }\n\n if (importRun) {\n const importedCountAfter = importRun.cursorAfter - importRun.skippedCount;\n statements.push({\n sql: `UPDATE vault_import_runs SET\n indexed_messages=indexed_messages + CASE WHEN cursor < ? THEN ? ELSE 0 END,\n cursor=MAX(cursor, ?),\n imported_count=MAX(imported_count, ?),\n skipped_count=MAX(skipped_count, ?),\n status=CASE\n WHEN ? > cursor THEN CASE WHEN ? >= total_candidates THEN 'COMPLETE' ELSE 'IN_PROGRESS' END\n ELSE status\n END,\n last_error=CASE WHEN ? > cursor THEN NULL ELSE last_error END,\n updated_at=?\n WHERE id=? AND source_fingerprint=?\n RETURNING cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at`,\n args: [\n importRun.cursorAfter,\n normalizedMessages.length,\n importRun.cursorAfter,\n importedCountAfter,\n importRun.skippedCount,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importedAt,\n importRun.id,\n importRun.fingerprint,\n ],\n });\n }\n\n const batchResults = await sqlite.batch(statements);\n const importProgress: any = importRun ? batchResults[batchResults.length - 1]?.rows?.[0] ?? null : null;\n return c.json({\n ok: true,\n id,\n contentBytes,\n projectedBytes: projected,\n indexedMessages: normalizedMessages.length,\n searchEngine: normalizedMessages.length ? \"fts5_bm25\" : \"legacy_like_fallback\",\n importProgress: importProgress ? {\n cursor: Number(importProgress.cursor ?? 0),\n importedCount: Number(importProgress.imported_count ?? 0),\n indexedMessages: Number(importProgress.indexed_messages ?? 0),\n skippedCount: Number(importProgress.skipped_count ?? 0),\n status: importProgress.status,\n lastError: importProgress.last_error,\n updatedAt: importProgress.updated_at,\n } : null,\n });\n});\n\napp.get(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const result = await sqlite.execute({\n sql: `SELECT id, source_fingerprint, source_name, source_size, total_candidates, cursor,\n imported_count, indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n FROM vault_import_runs WHERE id = ? LIMIT 1`,\n args: [id],\n });\n if (!result.rows.length) return c.json({ error: \"not_found\" }, 404);\n const row: any = result.rows[0];\n return c.json({\n ...row,\n inventory: (() => { try { return JSON.parse(String(row.inventory_json || \"{}\")); } catch { return {}; } })(),\n });\n});\n\napp.put(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const fingerprint = typeof body.sourceFingerprint === \"string\" ? body.sourceFingerprint.trim().toLowerCase() : \"\";\n const sourceName = typeof body.sourceName === \"string\" ? body.sourceName.trim().slice(0, 300) : \"\";\n if (!/^[a-f0-9]{64}$/.test(fingerprint) || !sourceName) return c.json({ error: \"valid_source_fingerprint_and_name_required\" }, 400);\n const total = Math.min(1_000_000, int(body.totalCandidates));\n if (total < 1) return c.json({ error: \"total_candidates_required\" }, 400);\n const cursor = Math.min(total, int(body.cursor));\n const importedCount = Math.min(cursor, int(body.importedCount));\n const indexedMessages = Math.min(50_000_000, int(body.indexedMessages));\n const skippedCount = Math.min(cursor, int(body.skippedCount));\n if (importedCount + skippedCount > cursor) return c.json({ error: \"import_progress_inconsistent\" }, 400);\n const sourceSize = Math.min(Number.MAX_SAFE_INTEGER, int(body.sourceSize));\n const allowedStatuses = new Set([\"IN_PROGRESS\", \"PAUSED\", \"COMPLETE\", \"FAILED\"]);\n const status = allowedStatuses.has(String(body.status)) ? String(body.status) : \"IN_PROGRESS\";\n if (status === \"COMPLETE\" && cursor !== total) return c.json({ error: \"complete_requires_full_cursor\" }, 400);\n const inventoryJson = JSON.stringify(body.inventory && typeof body.inventory === \"object\" ? body.inventory : {}).slice(0, 16_000);\n const lastError = typeof body.lastError === \"string\" && body.lastError.trim() ? body.lastError.trim().slice(0, 1000) : null;\n const existing = await sqlite.execute({ sql: \"SELECT source_fingerprint,total_candidates,status FROM vault_import_runs WHERE id = ? LIMIT 1\", args: [id] });\n if (existing.rows.length) {\n const row: any = existing.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n }\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO vault_import_runs(\n id, source_fingerprint, source_name, source_size, total_candidates, cursor, imported_count,\n indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET\n source_name=excluded.source_name,\n source_size=MAX(vault_import_runs.source_size, excluded.source_size),\n cursor=MAX(vault_import_runs.cursor, excluded.cursor),\n imported_count=MAX(vault_import_runs.imported_count, excluded.imported_count),\n indexed_messages=MAX(vault_import_runs.indexed_messages, excluded.indexed_messages),\n skipped_count=MAX(vault_import_runs.skipped_count, excluded.skipped_count),\n status=CASE WHEN vault_import_runs.status='COMPLETE' THEN 'COMPLETE' ELSE excluded.status END,\n inventory_json=CASE WHEN length(excluded.inventory_json) > 2 THEN excluded.inventory_json ELSE vault_import_runs.inventory_json END,\n last_error=CASE WHEN vault_import_runs.status='COMPLETE' OR excluded.status='COMPLETE' THEN NULL ELSE excluded.last_error END,\n updated_at=excluded.updated_at`,\n args: [id, fingerprint, sourceName, sourceSize, total, cursor, importedCount, indexedMessages, skippedCount, status, inventoryJson, lastError, now, now],\n });\n const saved = await sqlite.execute({\n sql: `SELECT id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at FROM vault_import_runs WHERE id=? LIMIT 1`,\n args: [id],\n });\n const row: any = saved.rows[0] ?? {};\n return c.json({\n ok: true,\n id: row.id,\n sourceFingerprint: row.source_fingerprint,\n sourceName: row.source_name,\n sourceSize: Number(row.source_size ?? 0),\n totalCandidates: Number(row.total_candidates ?? 0),\n cursor: Number(row.cursor ?? 0),\n importedCount: Number(row.imported_count ?? 0),\n indexedMessages: Number(row.indexed_messages ?? 0),\n skippedCount: Number(row.skipped_count ?? 0),\n status: row.status,\n lastError: row.last_error,\n updatedAt: row.updated_at,\n });\n});\n\napp.delete(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const results = await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true, rowsAffected: results[2]?.rowsAffected ?? 0 });\n});\n\napp.get(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const limit = Math.min(25, Math.max(1, Number(c.req.query(\"limit\") ?? 8) || 8));\n const project = (c.req.query(\"project\") ?? \"\").trim().slice(0, 120);\n const result = project\n ? await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints WHERE project = ? ORDER BY updated_at DESC LIMIT ?`,\n args: [project, limit],\n })\n : await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints ORDER BY updated_at DESC LIMIT ?`,\n args: [limit],\n });\n return c.json({ project: project || null, checkpoints: result.rows });\n});\n\napp.post(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const project = typeof body.project === \"string\" ? body.project.trim().slice(0, 120) : \"\";\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 240) : \"\";\n const summary = typeof body.summary === \"string\" ? body.summary.trim().slice(0, 12000) : \"\";\n if (!safeProject(project) || !title || !summary) return c.json({ error: \"project_title_summary_required\" }, 400);\n let id = typeof body.id === \"string\" ? body.id.trim() : \"\";\n if (!safeId(id)) id = `cp_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;\n const decisions = typeof body.decisions === \"string\" ? body.decisions.trim().slice(0, 12000) : \"\";\n const openGaps = typeof body.openGaps === \"string\" ? body.openGaps.trim().slice(0, 12000) : \"\";\n const nextAction = typeof body.nextAction === \"string\" ? body.nextAction.trim().slice(0, 12000) : \"\";\n const sourceConversationId = safeId(body.sourceConversationId) ? body.sourceConversationId : null;\n const evidenceState = typeof body.evidenceState === \"string\" ? body.evidenceState.trim().slice(0, 80) : \"CHECKPOINT\";\n const now = new Date().toISOString();\n\n await sqlite.batch([\n {\n sql: `INSERT INTO vault_checkpoints (\n id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n project=excluded.project, title=excluded.title, summary=excluded.summary,\n decisions=excluded.decisions, open_gaps=excluded.open_gaps, next_action=excluded.next_action,\n source_conversation_id=excluded.source_conversation_id, evidence_state=excluded.evidence_state,\n updated_at=excluded.updated_at`,\n args: [id, project, title, summary, decisions, openGaps, nextAction, sourceConversationId, evidenceState, now, now],\n },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [id] },\n {\n sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id, project, title, summary, decisions, open_gaps, next_action)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, project, title, summary, decisions, openGaps, nextAction],\n },\n ]);\n return c.json({ ok: true, id, project, title, evidenceState, updatedAt: now });\n});\n\napp.get(\"/api/checkpoint-search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n const match = ftsQuery(q);\n if (!match) return c.json({ query: q, results: [] });\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 25`,\n args: [match],\n });\n return c.json({ query: q, engine: \"fts5_bm25\", results: result.rows });\n});\n\nexport default oauthMiddleware(app.fetch);\n",[406],"7b1449d3-4b6a-4e86-bc7c-1b91f95b6856","README.md","01a07f42-c119-76ab-87e1-b8bd703f8e3f",["D",1788841476385],"# PayAna Ledger 1.0 — durable economic/opportunity state\n\nA PayAna agora possui uma camada estruturada e separada do transcript de conversa. O objetivo é garantir que `CONVERSATION_STATE != PROJECT_STATE` e que receita, oportunidades, ações e evidências possam ser retomadas sem reconstrução manual.\n\nTabelas Turso: `payana_state`, `payana_opportunities`, `payana_economic_events`, `payana_actions`, `payana_receipts`.\n\nBridge 0.6.0 adiciona: `payana_state_upsert`, `payana_opportunity_upsert`, `payana_economic_upsert`, `payana_action_upsert`, `payana_receipt_upsert`, `payana_snapshot`.\n\nEstado inicial validado: `REV-000001 = USD 0.01`, classificado como `USER_CONFIRMED_RECEIPT_UNVERIFIED`; uma receipt explícita `receipt-gap-REV-000001` registra a proveniência ainda ausente em vez de inventar plataforma, transaction ID ou timestamp.\n\nProvas desta branch: schema migration PASS em Turso; seed/readback PASS; snapshot via bridge PASS; invalid decimal, HTTP URL e SHA-256 são rejeitados; regressões V0.4/V0.5/V0.6/V0.7 e release audit permanecem PASS.\n\n---\n\n# V0.7 — real-export preflight / dry-run gate\n\nAntes de qualquer ingestão de export real, o Vault agora exige preflight em duas etapas:\n\n- `Somente analisar` inicia ligado e não grava no Turso;\n- o preflight mede conversas, mensagens textuais, mapping, IDs, content types, vazios e limites;\n- a liberação para escrita é vinculada a `sourceFingerprint + limite selecionado`;\n- trocar arquivo ou 25/50/100/.../completo invalida a liberação;\n- após conclusão ou replay já COMPLETE, o modo seguro é reativado;\n- ZIP64 seletivo é suportado, com multidisk e inteiros acima do limite seguro bloqueados;\n- anexos são inventariados, não ingeridos nesta etapa.\n\nProvas pré-merge: `v07_preflight_selftest.ts = PASS` com `sameDbBeforeAfter=true`; gate same-scope=true/different-limit=false/different-fingerprint=false; `v07_zip64_selftest.ts = PASS`; V0.6 e V0.5 regression PASS; release audit PASS; `/api/stats` anônimo = 401.\n\n---\n\n# V0.6 — Selective ZIP Import + Resumable Cursor\n\nStatus de promoção: `ZIP_SYNTHETIC_VERIFIED`; export oficial real ainda `UNVERIFIED`.\n\nNovidades:\n- aceita ZIP do export ou `conversations*.json` diretamente;\n- leitor ZIP seletivo lê diretório central + somente entradas de conversa, sem `file.arrayBuffer()` do ZIP inteiro;\n- suporta ZIP clássico com STORE/DEFLATE, valida tamanho e CRC32 e bloqueia ZIP criptografado, multidisk e ZIP64 por enquanto;\n- inventaria arquivos não ingeridos sem interpretá-los como conversa;\n- fingerprint baseado no conteúdo dos JSONs de conversa, estável mesmo após renomear/baixar novamente o mesmo export;\n- cursor persistente `vault_import_runs` no Turso com estados IN_PROGRESS/PAUSED/COMPLETE/FAILED;\n- conversa + mensagens + FTS + avanço do cursor são confirmados no mesmo batch transacional; replay do mesmo cursor não duplica `indexed_messages`;\n- timeout/erro transitório após write força reconciliação do run; se a reconciliação também falhar, o cliente entra em `UNKNOWN_EXTERNAL_STATE` e não repete cegamente;\n- run id escopado pelo tamanho selecionado (25/50/100/.../completo), evitando cursor incoerente ao ampliar a ingestão;\n- deduplicação por conversation id antes do cursor, mantendo a versão com maior `update_time`; itens sem ID não são deduplicados automaticamente para evitar perda por falso positivo;\n- UI mostra inventário, duplicatas removidas e cursor persistido.\n\nEvidência automática:\n- `v06_selftest.ts`: ZIP DEFLATE sintético particionado, leitura seletiva, CRC corruption, ZIP sem conversations, fingerprint, deduplicação e PAUSED→COMPLETE;\n- `v05_selftest.ts`: regressão V0.5;\n- `v06_release_audit.ts`: Turso/queue/resíduos antes da promoção;\n- `/api/import-runs/...` sem sessão: HTTP 401.\n\nLimites deliberados:\n- ZIP64 ainda bloqueado; não chamar de compatível com exports >4 GiB até implementar/testar ZIP64;\n- assets/PDFs/imagens são apenas inventariados nesta versão;\n- `ZIP_SYNTHETIC_VERIFIED != REAL_CHATGPT_EXPORT_VERIFIED`.\n\n---\n\n# V0.5 — Structured Knowledge + Hybrid Retrieval\n\nStatus antes do merge: backend/bridge verificado em Turso.\n\nNovidades:\n- `vault_knowledge_items` + FTS5 para regras, decisões, lições, arquitetura, riscos e achados estruturados;\n- `vault_relations` para relações graph-lite entre knowledge/checkpoint/conversation/entity/project/artifact/concept;\n- bridge actions `knowledge_upsert`, `get_knowledge`, `related`;\n- `search_hybrid`: ChatGPT gera variantes conceituais; backend executa FTS5/BM25 e Reciprocal Rank Fusion, sem chamar API de IA;\n- filtros de projeto/kind estritos;\n- knowledge writes idempotentes por ID e seguros contra stale retry;\n- relação inválida falha antes de persistência;\n- UI mostra conhecimento estruturado e relações.\n\nEvidência V0.5: `v05_selftest.ts` deve retornar `pass:true`. Corpus histórico real do ChatGPT continua pendente de export oficial.\n\n---\n\n# V0.4 — ChatGPT Bridge\n\nA V0.4 transforma o GUH Vault em memória consultável pelo próprio ChatGPT através do conector Val Town autenticado, sem API da OpenAI e sem scraping de chatgpt.com.\n\nFluxo: `ChatGPT -> Val Town control plane -> vault_bridge.ts -> Turso -> FTS5/BM25 -> ChatGPT`.\n\nAções fechadas: `search`, `get_conversation`, `stats`, `checkpoint_upsert`.\n\nControles: claim atômico, lease de 2 minutos, máximo 2 tentativas, recuperação de stale RUNNING, checkpoint idempotente, allowlist de ações, Turso fail-closed e resultados externos tratados como dados não confiáveis.\n\nEvidência antes do merge: search PASS; get_conversation PASS; stats PASS; checkpoint_upsert PASS; ação proibida BLOCKED; stale recuperável PASS na segunda tentativa; stale com orçamento esgotado FAIL sem terceira execução; queue final sem PENDING/RUNNING.\n\nSkill pessoal: `skills/guh-vault/SKILL.md`.\n\n---\n\n# V0.3.1 — FAIL-CLOSED STORAGE HOTFIX\n\nApós promover Turso a fonte principal, fallback automático para o SQLite local foi desabilitado. Motivo: após novas escritas no Turso, a cópia local pode ficar stale. Se a configuração externa desaparecer, o app deve bloquear (`TURSO_REQUIRED_NOT_CONFIGURED`) em vez de servir estado antigo silenciosamente.\n\nPolítica pura testada:\n- sem URL + sem token -> BLOCKED_EXTERNAL_REQUIRED\n- somente URL -> BLOCKED_EXTERNAL_REQUIRED\n- somente token -> BLOCKED_EXTERNAL_REQUIRED\n- URL + token -> TURSO_ACTIVE\n- localFallbackEnabled = false\n\nO SQLite local continua preservado para recuperação/migração manual, não como fallback invisível de produção.\n\n---\n\n# V0.3.0 — TURSO / EXTERNAL TEXT STORAGE\n\nCheckpoint: 2026-09-06\n\n## Estado\n\n- `TURSO_DATABASE_URL`: configurada (valor não documentado)\n- `TURSO_AUTH_TOKEN`: configurado (valor não documentado)\n- Turso: CONFIGURED + AUTHENTICATED + REACHABLE\n- provider ativo da branch V0.3: `turso`\n- fallback: Val Town project-scoped SQLite quando Turso não estiver configurado\n- cliente: `@libsql/client/web` (o cliente padrão falhou no runtime Val Town por dependência binária nativa)\n\n## Migração comprovada\n\nOrigem Val Town e destino Turso reconciliados após o checkpoint V0.3:\n\n- conversas: 3 = 3\n- mensagens: 10 = 10\n- checkpoints: 3 = 3\n- FTS mensagens no Turso: 10\n- FTS checkpoints no Turso: 3\n- SHA-256 canônico de conversas: igual\n- SHA-256 canônico de mensagens: igual\n- SHA-256 canônico de checkpoints: igual\n- `Kernel timeout`: PASS\n- `NR-12`: PASS\n- `reconciliação`: PASS\n- `export oficial`: checkpoints encontrados\n- termo inexistente: 0 hits\n\n## Reliability / security controls\n\n- active provider execute: PASS\n- active provider batch transacional: PASS\n- fixture de batch removida: PASS (`probeResidue=0`)\n- credencial Turso propositalmente inválida: rejeitada (`LibsqlError`)\n- `/api/stats` sem sessão: HTTP 401 / sem dados\n- valores de credentials não são impressos por self-tests/status\n\n## Estado epistemológico\n\n`TURSO_AVAILABLE -> CONFIGURED -> AUTHENTICATED -> EXECUTED -> VERIFIED`\n\nA V0.3 ainda não deve ser chamada `IPHONE_OPERATIONAL` até a interface principal ser aberta no iPhone depois do merge e uma reimportação confirmar escrita/search no Turso.\n\n## Próxima prova\n\nApós promoção para `main`:\n1. abrir `guh-knowledge-vault.val.run` no iPhone;\n2. confirmar `V0.3 • Turso • FTS5/BM25`;\n3. confirmar 3 conversas / 10 mensagens / 10 indexadas / 3 checkpoints;\n4. reimportar o JSON sintético;\n5. confirmar que permanece 3/10/10, sem duplicação;\n6. pesquisar `Kernel timeout`, `NR-12`, `export oficial`;\n7. somente então promover interface V0.3 para `OPERATIONAL_SYNTHETIC_E2E_TURSO`.\n\n---\n\n# GUH Knowledge Vault — V0.2.0\n\nCofre pessoal pesquisável para histórico exportado do ChatGPT + checkpoints do trabalho corrente, sem usar a API da OpenAI.\n\n## Runtime\n\n`iPhone/browser -> OAuth Val Town -> Hono -> SQLite/FTS5 -> resultados`\n\nO código é público por restrição do workspace Free, mas as rotas de dados exigem login Val Town e aceitam apenas `username === cleitoncosta`.\n\n## O que a V0.2 adiciona\n\n- mensagens persistidas individualmente em `vault_messages`;\n- índice `vault_messages_fts` com SQLite FTS5;\n- ranking BM25;\n- tokenização Unicode com remoção de diacríticos;\n- busca multi-termo com AND + prefix matching;\n- fallback para a busca V0.1 quando não houver mensagens indexadas;\n- checkpoints persistentes em `vault_checkpoints`;\n- índice FTS dos checkpoints;\n- busca universal capaz de retornar conversas + checkpoints;\n- detalhe da conversa renderizado mensagem por mensagem quando o índice existe;\n- reimportação/reindexação idempotente para uma mesma conversa;\n- `vault_meta.schema_version = 0.2.0`;\n- self-test stateful com limpeza de fixture.\n\n## Duas rotas de memória\n\n### Histórico antigo\n\n`export oficial -> conversations.json -> importador no navegador -> conversa + mensagens -> FTS5`\n\n### Conhecimento novo\n\n`ChatGPT/conector Val Town -> checkpoint estruturado -> vault_checkpoints -> FTS5`\n\nIsso evita depender exclusivamente de novos exports para preservar decisões e estado de projetos daqui para frente.\n\n## Estado persistido no fechamento da V0.2\n\n- 3 conversas sintéticas compatíveis com export;\n- 10 mensagens de origem;\n- 10 mensagens individualmente indexadas;\n- 10 linhas no índice FTS das mensagens;\n- 970 B de conteúdo legado de conversa;\n- 1 checkpoint real sobre a prova da V0.1 no iPhone;\n- 0 fixtures de self-test restantes.\n\n## Evidência\n\n### PASS\n\n- V0.1 real no iPhone: login, importação, persistência, busca e abertura de conversa;\n- FTS5 disponível no SQLite do Val Town;\n- `Kernel timeout` -> conversa correta;\n- `NR-12` -> conversa correta;\n- `reconciliação` -> duas conversas relacionadas;\n- checkpoint encontrado por `export + oficial`;\n- controle negativo inexistente -> 0 hits;\n- reindex replay -> 2 mensagens continuam 2, sem duplicação;\n- replay FTS -> 2 linhas continuam 2;\n- self-test final -> `pass=true`;\n- self-test remove as próprias fixtures;\n- `index.ts` compila no runtime;\n- `frontend/components/App.tsx` compila no runtime;\n- visitante sem sessão continua redirecionado para autenticação.\n\n### Falha útil encontrada\n\nO primeiro self-test assumia incorretamente que uma busca por `kernel` retornaria somente a fixture. Como já havia uma conversa real de teste com esse termo, o self-test marcou FAIL apesar do sistema estar correto.\n\nCorreção: o validador passou a testar a presença da fixture dentro do escopo correto, sem assumir exclusividade global.\n\nLesson learned: **um teste pode falhar por hipótese inválida do próprio validador; negative controls e escopo explícito são obrigatórios.**\n\n### Ainda UNVERIFIED\n\n- parser contra export oficial real desta conta;\n- importação real de 25/50/100 conversas;\n- comportamento com um export muito grande no Safari/iPhone;\n- assets, imagens, PDFs, ZIPs e outros anexos do export;\n- busca semântica por embeddings/conceitos;\n- camada de armazenamento maior para histórico completo;\n- sincronização automática do histórico interno do ChatGPT.\n\n## Limites deliberados\n\nA V0.2 ainda preserva `conversations.content_text` por compatibilidade com a V0.1 e também mantém mensagens individualizadas + índice. Isso duplica parte do conteúdo e não é a arquitetura final para milhares de conversas.\n\nAntes da importação massiva, deve ser criada uma camada de armazenamento maior e o orçamento deve considerar tamanho físico real, não apenas `content_bytes` da tabela legada.\n\n## Próximos marcos\n\n1. Testar um export oficial real.\n2. Medir tamanho/quantidade real de chats e assets.\n3. Escolher storage gratuito maior para o histórico completo.\n4. Migrar o corpo das mensagens para arquitetura sem duplicação desnecessária.\n5. Adicionar projetos, entidades, relações e artefatos.\n6. Evoluir de full-text para busca híbrida/semântica sem depender da API da OpenAI.\n7. Criar interface/tool para outros agentes consultarem o Vault.\n8. Automatizar checkpoints quando o usuário solicitar `salve checkpoint`.\n",[413],"7e56449d-0f82-413e-9072-8035460b8f29","CHANGELOG.md","01a07f42-c119-76ab-87e1-b56eccbf6f40",["D",1788841476385],"# PayAna BountyBook monitor — 2026-09-07\n\n- Added read-only live reconciliation across BountyBook homepage, `/jobs?status=open` API, and `/health`.\n- Found and encoded a material surface divergence: homepage reports `0 open`, while live API reports 120 rows marked open.\n- Integrity audit found those 120 rows total 598 USDC, all have `contract_job_id=0` and `payout_status=none`, while `/health` reported treasury `0.396733 USDC` and 39 failed payouts at the audit instant.\n- New invariant: `API_STATUS_OPEN != ESCROW_FUNDED_OPEN`; API rows are not promoted to executable revenue targets without funding/escrow proof.\n- Monitor persists `bountybook_watch` in Turso and only emits a `MONITOR_CHANGE` action receipt when material state changes; repeated identical runs do not duplicate change receipts.\n- On fetch failure, last-known opportunity state is preserved: `FETCH_FAIL != ZERO_OPEN`.\n- Added reusable read-only scanner and audit scripts under `payana/`.\n\n---\n\n# PayAna Ledger 1.0 — 2026-09-07\n\n- Added dedicated Turso tables for PayAna state, opportunities, economic events, actions and receipts.\n- Seeded `REV-000001 = USD 0.01` with `USER_CONFIRMED_RECEIPT_UNVERIFIED` instead of fabricating missing provenance.\n- Added explicit `receipt-gap-REV-000001` to track missing platform/task/transaction/timestamp evidence.\n- Added five reconciled opportunity records: TermMax/Immunefi, BlockPI/Immunefi, Binance Agent OS 2026, OpenCV AI 2026, BountyBook current state.\n- Extended `vault_bridge.ts` to bridge version 0.6.0 with six PayAna actions and snapshot retrieval.\n- Added fail-closed validation for decimal values, HTTPS URLs and SHA-256 receipts.\n- Regression evidence: V0.4 bridge PASS, V0.5 PASS, V0.6 PASS, V0.7 preflight PASS, ZIP64 PASS, release audit PASS.\n\n---\n\n# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v17